Watch ISA's Full Congressional Briefing at Capitol Hill

Presented to Members of Congress and congressional staff on September 2, 2026.

Our Research Approach

ISA’s proposed AI policy is informed by a cross-sector analysis of AI-related cyber risks and governance challenges. This research was developed through in-depth presentations and discussions led by ISA Board Members, CISOs, and senior security executives representing five critical sectors of the economy.

Executive Research Presentations

The following presentations formed the foundation of ISA’s cross-sector AI risk analysis, highlighting key findings, emerging concerns, and recommendations from each sector.

Defense Industrial Base (DIB)

JR Williamson

VP & CISO at Leidos

energy

Michael Woods

CISO at GE Vernova

financial services

Jon Brickey

Sr. VP at Mastercard (Retired)

healthcare

Craig Martin

EVP, Enterprise Information Security at UnitedHealth Group

information technology (IT)

Kris Lovejoy

Global Head of Strategy at Kyndryl

CROSS-SECTOR THREAT INTELLIGENCE

Cross-Sector AI Risk Analyses

Building upon the executive presentations and subsequent Board-level discussions, ISA developed a series of cross-sector AI risk analyses that synthesize key findings, shared challenges, and sector-specific concerns identified throughout the research process. This drove our congressional briefing at Capitol Hill, as each presentation was driven by these analyses.

AI in Defense (DIB)

AI in Energy

AI in Financial Services

AI in Healthcare

AI in Information Technology (IT)

Released Blogs on Our Findings

Explore deep structural findings, cybersecurity audits, and strategic policy recommendations from our modern security analysts.

Blog 1: ISA ANNOUNCES CISO-BASED, CROSS-SECTOR CYBERSECURITY ARCHITECTURE

Published in Cyber Architecture • 5 Min Read. Highlighting standard operational frameworks designed to scale security parameters cross-sector.

Blog 2: ISA CROSS-SECTOR AI STUDY IDENTIFIES CONVERGENT NEEDS OF SECTORS

Published in AI Research • 6 Min Read. Evaluating critical threat loops and systemic failure points within modern operational algorithms.
Published in Infrastructure Security • 4 Min Read. Examining procedural security flaws and modernization needs inside legacy structural assets.
Published in Global Policy • 7 Min Read. A concluding review proposing essential framework parameters for collaborative, international AI governance pacts.