Critical AI deployers would plan for risks to infrastructure

Deployers would need to develop a policy for managing risks. The requirement would apply when a critical AI system controls all or part of a critical infrastructure facility. The policy would need to be reasonable and consider guidance and standards from a nationally or internationally recognized AI risk framework. A plan prepared under federal requirements would count as compliance. The policy would be developed after deployment. The act would take effect on passage and approval.