AI Use Cases

Use case	Agency	Stage	High-impact	Topic area	AI classification	Sourcing
Phishing Email Identification FHFA-3 · OCOO	FHFA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Security and network monitoring using Cisco Identify Services engine FHFA-10 · OCIO	FHFA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Security and Compliance in file sharing and collaboration using Kiteworks FHFA-14 · OCIO	FHFA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Cybersecurity Defense Tools DOJ-0101 · Department of Justice / Department Wide	DOJ	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Critical Infrastructure Network Anomaly Detection DHS-106 · CISA	DHS	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Developed in-house
AI Assisted Compromise Email Detector (AACED) DHS-2424 · ICE	DHS	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Developed in-house
Application Observability Support R3117 · Chief Information Officer, System Operations and Hardware En	SSA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Network Security and Analysis DOE-347 · IM-60 - IM Enterprise Operations and Shared Services (IM)	DOE	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Machine Learning components within Splunk Enterprise Security DOE-456 · SLAC - SLAC National Accelerator Laboratory (SC43 OIM)	DOE	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Machine Learning components within CrowdStrike DOE-458 · SLAC - SLAC National Accelerator Laboratory (SC43 OIM)	DOE	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Internet of Medical Things (IoMT) Inventory VA-24-2791 · VHA: Veterans Health Administration	VA	Pilot	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
AI Resolution Notes Generation SBA-36 · OCIO: Office of the Chief Information Officer	SBA	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
AI Vulnerability Ticket Deduplication SBA-37 · OCIO: Office of the Chief Information Officer	SBA	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
AI Vulnerability Remediation Assistance SBA-38 · OCIO: Office of the Chief Information Officer	SBA	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Crickets DOE-723 · SRS - ESB - Savannah River Site - Enterprise System Boundary	DOE	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Developed in-house
Autonomous Network Security NASA-578 · GSFC: Goddard Space Flight Center	NASA	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Not reported
Managing Cybersecurity Controls NEA-0001 · NEA	NEA	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Not reported
Cyber Threat Detection DHS-2446 · CBP	DHS	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Not reported
Malware Reverse Engineering DHS-107 · CISA	DHS	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Not reported
Policy Knowledge Base VA-25-6903 · OEHRM: Office of Electronic Health Record Modernization	VA	Pre-deployment	Not high-impact	Cybersecurity	Classical / predictive ML	Not reported