Orders an evaluation of potential protective measures for mobile devices within the Department of Defense, including defenses against AI-driven smishing and phishing.
Analysis summaries, actor details, and coverage mappings were LLM-classified and may contain errors.
This is a binding legislative provision enacted by the United States Congress as part of the National Defense Authorization Act for Fiscal Year 2025, with mandatory obligations on the Secretary of Defense to conduct evaluations and submit reports.
The document has minimal coverage of approximately 3-4 subdomains, with focus on AI system security (2.2), cyberattacks and weapons (4.2), fraud and manipulation (4.3), and potentially governance failure (6.5). Coverage is concentrated in security and malicious actor domains, specifically addressing defensive measures against AI-enabled threats.
This document exclusively governs the National Security sector, specifically addressing cybersecurity measures for mobile devices within the Department of Defense. It mandates evaluation of protective technologies against AI-driven threats for military and defense operations.
The document primarily addresses the Verify and Validate stage through evaluation of cybersecurity technologies, and the Deploy stage through assessment of feasibility and integration. It also touches on Operate and Monitor through consideration of endpoint detection and ongoing protection measures.
The document explicitly mentions generative artificial intelligence in the context of smishing, phishing, and business email compromise protection. It does not define AI models or systems, nor does it mention frontier AI, general purpose AI, foundation models, compute thresholds, or open-weight models.
United States Congress
The document is Section 1515 of the Servicemember Quality of Life Improvement and National Defense Authorization Act for Fiscal Year 2025, which is enacted by the United States Congress as the legislative authority.
Congressional defense committees
The congressional defense committees serve as the enforcement body through their oversight role, receiving mandatory reports on the evaluation findings and having authority to review compliance with the statutory requirements.
Congressional defense committees
The congressional defense committees monitor implementation through the mandatory reporting requirement, which includes findings of the evaluation and determinations about technology procurement and incorporation.
Department of Defense; Secretary of Defense
The document explicitly targets the Department of Defense and the Secretary of Defense, who are required to carry out evaluations of cybersecurity products and services for mobile devices, including AI-driven protective measures.
4 subdomains (4 Minimal)