Facing the Artificial Intelligence–Cyber Nexus

A Structured Approach to Government Decisionmaking to Address Emerging Artificial Intelligence Capabilities for Cyber Attacks

Quentin E. Hodgson, Kamaria Horton, Matthew J. Malone

ResearchPublished Nov 13, 2025

Cover: Facing the Artificial Intelligence–Cyber Nexus
Download PDF
Additional Downloads

Includes Decision Aid on Assessing and Responding to Emerging Threats of AI-Enabled Offensive Cyber Operations

RAND researchers aim to inform policymakers on how to prepare for the emergence of increasingly capable artificial intelligence (AI) systems that can plan and execute offensive cyberspace operations (OCOs). Although the precise capabilities and timeline of AI-enabled OCOs are unknown, policymakers should anticipate that malicious actors will employ AI in cyberattacks and establish a decisionmaking framework to prevent or mitigate risks from these threats. In this report, researchers provide guiding questions to facilitate the decisionmaking process for policy actions spanning private-sector engagement, diplomatic engagement, law enforcement, finance, commerce, the military, and intelligence. The report includes recommendations for policymakers on next steps, including continuing to wargame scenarios, expanding the pool of government AI expertise and access, strengthening the resilience of critical infrastructure, and integrating AI responsibly into cyber defenses.

Topics

Document Details

Citation

Chicago Manual of Style

Hodgson, Quentin E., Kamaria Horton, and Matthew J. Malone, Facing the Artificial Intelligence–Cyber Nexus: A Structured Approach to Government Decisionmaking to Address Emerging Artificial Intelligence Capabilities for Cyber Attacks. Santa Monica, CA: RAND Corporation, 2025. https://www.rand.org/pubs/research_reports/RRA4250-1.html.
BibTeX RIS

Research conducted by

This research was independently initiated using gifts for research at RAND's discretion from philanthropic supporter Open Philanthropy, as well as gifts from other RAND supporters and income from operations. The research was conducted by the Meselson Center within RAND Global and Emerging Risks.

This publication is part of the RAND research report series. Research reports present research findings and objective analysis that address the challenges facing the public and private sectors. All RAND research reports undergo rigorous peer review to ensure high standards for research quality and objectivity.

This document and trademark(s) contained herein are protected by law. This representation of RAND intellectual property is provided for noncommercial use only. Unauthorized posting of this publication online is prohibited; linking directly to this product page is encouraged. Permission is required from RAND to reproduce, or reuse in another form, any of its research documents for commercial purposes. For information on reprint and reuse permissions, please visit www.rand.org/pubs/permissions.

RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.