AI Use Cases

Use case	Agency	Stage	High-impact	Topic area	AI classification	Sourcing
Phishing Email Identification FHFA-3 · OCOO	FHFA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Security and network monitoring using Cisco Identify Services engine FHFA-10 · OCIO	FHFA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Security and Compliance in file sharing and collaboration using Kiteworks FHFA-14 · OCIO	FHFA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Cybersecurity Defense Tools DOJ-0101 · Department of Justice / Department Wide	DOJ	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
User Entity and Behavior Analytics (UEBA) for Security Operations (SecOps) Anomaly Identification DHS-372 · USCIS	DHS	Deployed	Presumed high-impact, determined not	Cybersecurity	Classical / predictive ML	Contract and in-house
Critical Infrastructure Network Anomaly Detection DHS-106 · CISA	DHS	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Developed in-house
AI Assisted Compromise Email Detector (AACED) DHS-2424 · ICE	DHS	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Developed in-house
Application Observability Support R3117 · Chief Information Officer, System Operations and Hardware En	SSA	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Network Security and Analysis DOE-347 · IM-60 - IM Enterprise Operations and Shared Services (IM)	DOE	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Machine Learning components within Splunk Enterprise Security DOE-456 · SLAC - SLAC National Accelerator Laboratory (SC43 OIM)	DOE	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Machine Learning components within CrowdStrike DOE-458 · SLAC - SLAC National Accelerator Laboratory (SC43 OIM)	DOE	Deployed	Not high-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Heuristic Behavior Analytics VA-25-2537 · OIT: Office of Information & Technology	VA	Deployed	High-impact	Cybersecurity	Classical / predictive ML	Purchased from vendor
Elastic Machine Learning Threat Detection (Phase 1) R1179	GSA	Deployed	Not reported	Cybersecurity	Classical / predictive ML	Not reported
Elastic Machine Learning Threat Detection (Phase 2) R1180	GSA	Deployed	Not reported	Cybersecurity	Classical / predictive ML	Not reported