Virginia Governor Spanberger issues cybersecurity directive targeting AI risks

Virginia Governor Abigail Spanberger has issued Executive Directive 6 to bolster the Commonwealth’s cybersecurity and address risks associated with the rapid advancement of artificial intelligence. The directive instructs the Secretary of Public Safety and Homeland Security to create a statewide plan to prevent and respond to cyberattacks while strengthening critical infrastructure resilience.

A key component of the order is the establishment of a Cyber Consortium. This body aims to improve coordination between public safety leaders, emergency management, state agencies, universities, and private sector partners. The directive also tasks the Virginia AI Task Force with holding regular briefings with AI technology companies, researchers, and regulators to evaluate and mitigate emerging risks.

Governor Spanberger cited the increasing ease with which AI can be used to exploit digital infrastructure, noting recent discoveries of flaws in PHP code and reports of AI agents taking unintended actions on government websites. In her announcement, she criticized the federal government and Congress for a lack of leadership regarding AI-related security threats.