SB2606 would require the Commander of United States Cyber Command to complete development of a roadmap for industry collaboration on artificial intelligence–enabled cyber capabilities for cyberspace operations of the Department of Defense, in coordination with key DoD offices. The roadmap sets out the framework for private-sector engagement, including how to convene AI developers and cybersecurity experts, how information on AI capabilities will be exchanged, and how partnerships will be structured.
It also requires milestones, pilot programs, and a mechanism to transition technologies from development to operational use. Initial congressional briefings are mandated, followed by annual updates through 2030 to keep lawmakers informed on progress and the state of industry collaboration.
At a Glance
What It Does
Not later than August 1, 2026, US Cyber Command must complete a roadmap for industry collaboration on AI-enabled cyber capabilities for DoD cyberspace operations, developed in coordination with the DoD CIO, DARPA, USD(R&E), USD(A&S), and DIU.
Who It Affects
Private-sector AI developers and cybersecurity firms; DoD components (including USCYBERCOM); DoD R&D and acquisition offices; and DIU and related agencies involved in defense innovation.
Why It Matters
This creates a formal, government-wide pathway for private-sector AI collaboration in cyber operations, defining governance, engagement rules, and milestones to accelerate capability development while aligning with security and policy considerations.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill directs the Commander of United States Cyber Command to produce a comprehensive roadmap that maps out how the Department of Defense will work with private AI developers on cyber capabilities. The plan is built around collaboration with several DoD offices and agencies, with the aim of integrating AI into both offensive and defensive cyberspace operations.
It specifies how industry partners will be engaged, what kind of contracts and security arrangements will be needed, and how pilot programs will be run to test and mature technologies before they are adopted at scale.
Key components of the roadmap include a set of actions for collaborative R&D with industry, defined development lines of effort and near-term use cases, a strategy for how the DoD will engage with industry (including contracting and security-clearance considerations), and a plan for implementing milestones and transitioning technology into operational use. The bill also requires an initial briefing to Congress by November 1, 2026, and annual updates on the status of industry collaboration beginning with the FY 2028 budget cycle and continuing through 2030.
The roadmap may propose creating a new DoD center or integrating the effort within existing structures to manage ongoing industry collaboration.
The Five Things You Need to Know
By August 1, 2026, USCYBERCOM must finalize the AI cyber collaboration roadmap.
The roadmap must specify contractual mechanisms and security-clearance requirements for industry partners.
It includes implementation milestones, pilot programs, and technology transition paths.
Initial congressional briefing due by November 1, 2026, with annual briefings through 2030.
The plan contemplates either a new center or integration within existing DoD structures to oversee collaboration.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Roadmap development and coordination
Not later than August 1, 2026, the Commander of US Cyber Command must complete development of a roadmap for industry collaboration on AI-enabled cyber capabilities for DoD cyberspace operations. This work is to be done in coordination with the DoD Chief Digital and AI Office, DARPA, the Under Secretary of Defense for Research and Engineering, the Under Secretary of Defense for Acquisition and Sustainment, and the Director of the Defense Innovation Unit. The focus is to establish a governance framework for private-sector engagement and to set the stage for actionable collaboration across the DoD enterprise.
Framework for private-sector coordination
The roadmap’s purpose is to create a formal framework that enables coordinated private-sector engagement with DoD on AI-enabled cyber capabilities. It envisions convening AI developers, cybersecurity experts, and relevant government offices and facilitating information exchange about AI technologies and capabilities applicable to cyber operations.
R&D partnership actions
This section describes the courses of action and governance approach for managing collaborative research and development partnerships with industry. It outlines how DoD will select partners, structure collaborations, and monitor progress to ensure alignment with national security objectives and programmatic needs.
Lines of effort and near-term use cases
The roadmap will establish collaborative development lines of effort for AI-enabled cyber capabilities and identify near-term use cases to guide investment, testing, and integration plans. It clarifies how targeted use cases will be chosen and evaluated for operational relevance and risk.
Engagement strategy and authorities
The plan addresses the strategy and methodology for industry engagement, including contractual mechanisms for cyber tools, security clearance requirements and resource needs for industry partners, and an evaluation of existing authorities with recommendations for policy changes or new authorities where needed.
Implementation milestones and pilots
The roadmap sets concrete implementation objectives and milestones and assesses the status of relevant pilot programs. It provides a framework for measuring progress and adapting plans based on lessons learned from pilots and early deployments.
Technology transition, infrastructure, and structure
This section covers how technologies move from development to operational use, the infrastructure required to support collaboration (and the associated costs), and options for DoD organizational structure — including the possible creation of a new center or integration within existing DoD organizations to oversee industry collaboration.
Initial congressional briefing
Not later than November 1, 2026, the Commander of United States Cyber Command must brief the congressional defense committees on the roadmap developed under subsection (a).
Annual congressional briefings
Beginning with the fiscal year 2028 budget submission and through December 31, 2030, the Commander shall provide the congressional defense committees with annual briefings on the status of industry collaboration activities carried out under the roadmap.
This bill is one of many.
Codify tracks hundreds of bills on Defense across all five countries.
Explore Defense in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- USCYBERCOM and DoD cyber mission units gain a formal, coordinated framework to access AI-enabled capabilities aligned with security objectives.
- Private-sector AI developers and cybersecurity firms can engage in federally funded pilots and contracts under clear governance.
- Defense-focused technology suppliers and toolmakers gain clearer pathways to collaborate with DoD on AI-driven cyber solutions.
- DARPA, the Defense Innovation Unit (DIU), and other DoD R&D offices benefit from structured collaboration and governance.
- DoD procurement and contracting offices obtain a defined process for engaging industry partners and evaluating new authorities.
Who Bears the Cost
- DoD budget allocations for pilots, infrastructure, and coordination efforts must cover the expanded collaboration program.
- Industry partners may incur costs for security clearances, compliance, and safeguarding sensitive DoD information.
- DoD acquisition and contracting offices may need to adjust processes to accommodate new collaboration models and oversight.
- Potential policy changes or new authorities may require investment in staff and systems to implement.
- Cross-agency coordination could require additional administrative resources to sustain ongoing briefings and reporting.
Key Issues
The Core Tension
The central tension is balancing rapid private-sector AI innovation and collaboration with DoD’s need for rigorous security, accountability, and cost control — a framework that enables momentum without sacrificing control or creating unsustainable dependencies on external partners.
The proposal sets a multi-year, coordinated framework for industry participation in AI-enabled cyber capabilities, which could accelerate innovation but also introduces governance and cost considerations. It relies on future appropriations to fund pilots, infrastructure, and governance activities, and it contemplates potential organizational changes within DoD to manage the collaboration.
The bill does not specify funding levels or a secure funding mechanism beyond the planning mandate, leaving questions about long-term sustainability, priority setting, and oversight.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.