NCCoE AI RMF Community of Interest — Membership Confirmed
ATR was confirmed as a member of NIST NCCoE's Community of Interest 2026-05-09. Combined with the OSCAL Team thread and the CAISI RFI submission, ATR now has three touchpoints in the federal AI standards stack.
The NIST National Cybersecurity Center of Excellence (NCCoE) operates Communities of Interest — open forums where industry practitioners, federal agencies, and academic researchers collaborate on cybersecurity reference architectures and standards work. Membership is the on-ramp for influencing what NIST eventually publishes.
On 2026-05-09, the AI RMF Community of Interest confirmed ATR (Adam Lin / KUAN-HSIN LIN) as a member.
Why This Matters
AI RMF lives at the intersection of three NIST work streams that are still finding each other:
- ●The AI RMF Core and Playbook under the AI Safety Institute
- ●The OSCAL family under the Computer Security Division
- ●The CAISI AI Agent Standards Initiative, scheduled to publish an Agent Interoperability Profile in Q4 2026
A community-side contributor that is active across all three has a non-trivial chance of shaping decisions that will set the federal baseline for AI agent security. ATR is now positioned with touchpoints in all three:
1. NCCoE COI — confirmed 2026-05-09
2. OSCAL Team thread at usnistgov/OSCAL#2234 — open, with the AI RMF OSCAL catalog v0.3 attached for review
3. CAISI RFI on AI Agent Security via regulations.gov — submitted 2026-05-09 alongside the COI application
What Membership Actually Means
NCCoE COI is not a board seat. It is a working forum: members read drafts, contribute reference implementations, attend working meetings, and influence the direction of NCCoE projects. The leverage comes from being early, technical, and reliable — not from titles.
For ATR specifically, the COI membership lets us:
- ●Surface the OSCAL AI RMF catalog to a federal-adjacent audience that already understands OSCAL
- ●Connect the catalog drift analysis (41 of 72 controls drifted between AI RMF Core and Playbook JSON) directly to people who can fix it upstream
- ●Contribute reference implementations as NCCoE projects spin up on AI agent topics
What Comes Next
The immediate near-term: respond to the NIST OSCAL Team on #2234 (scheduled 2026-05-14 22:00 Taipei = 10 AM ET Wednesday), leading with the drift finding. The COI membership and the OSCAL thread are complementary — one is a long-term forum, the other is a specific deliverable in review.
Mid-term: contribute to whichever NCCoE AI RMF project lands first. If a reference architecture for AI agent governance gets scoped, ATR has 336 rules and an OSCAL catalog ready to plug in.
Long-term: the CAISI Q4 2026 Agent Interoperability Profile is the prize. Being inside the COI when that drafts is materially different from being outside it.