September 17th, 2026 @5:30 PM – Victoria Yan Pillitteri – Same Controls, New Frontier: Adapting the NIST SP 800-53 Controls for AI Systems

Register:
This is a Hybrid meeting. A dinner meal will be served (Meal menu TBD). REGISTER HERE for IN PERSON & ONLINE Zoom, Location Marymount University Ballston Center 1000 N Glebe Rd, Arlington, VA 22201. This will be in room: TBD. Metro Station Accessible. Registration closes Wednesday, 09/16/26.

Abstract:
AI systems introduce new risks—but they don’t require abandoning established cybersecurity foundations. In fact, much of what secures traditional IT systems still applies. The challenge lies in understanding where AI cybersecurity risks are different—and where they are not. The NIST Control Overlays for Securing AI Systems (COSAiS) Project demonstrates how existing SP 800-53 controls can be thoughtfully adapted to address AI-specific risks. Building upon the NIST Risk Management Framework and aligned with the NIST AI Risk Management Framework, AI overlays clarify which controls remain unchanged, which require enhancement, and where entirely new considerations emerge—such as training data integrity, model behavior manipulation, adversarial inputs, and AI supply chain dependencies. Learn more about COSAiS and get engaged with the ongoing work and community of interest.

Speaker Bios:
Victoria Yan Pillitteri is a supervisory computer scientist and manager of the Security Engineering and Risk Management Group at the National Institute of Standards and Technology (NIST). The group conducts the research and development of the suite of risk management, systems security engineering, and cybersecurity risk analytics and measurement guidance used for managing cybersecurity risk. She is the co-author of multiple NIST publications that are foundational for cybersecurity risk management, including the security and privacy controls, control assessment procedures, the Risk Management Framework, and the CUI security requirements and assessment procedures (Special Publications (SP) 800-53, SP 800-53A, SP 800-53B, 800-37, 800-171, and 800-171A).

Ms. Pillitteri holds a B.S. in Electrical Engineering from the University of Maryland, a M.S. in Computer Science, with a concentration in Information Assurance, from the George Washington University, completed the Key Executive Leadership Program at American University, and is a Certified Information Systems Security Professional (CISSP).