VA.Regulation
Virginia Executive Directive 6 requires statewide AI cyber-threat plan and Cyber Consortium
Virginia issued Executive Directive 6 on October 23, 2026, directing the Secretary of Public Safety and Homeland Security and the AI Task Force to prepare a coordinated cyber-threat response and infrastructure-hardening plan. The directive requires a Cyber Consortium under the Unified Readiness Framework, quarterly readiness briefings, and an independent privacy and security review of interoperable data systems. It takes effect on signing.
Text (Office of the Governor of Virginia) → · StateScoop
Key points
- The Secretary establishes a Cyber Consortium that adopts a Commonwealth-wide cyber-attack prevention and response plan and an infrastructure-hardening plan.Office of the Governor of Virginia
- All other executive branch agencies cooperate with the Secretary on request; designated agencies participate in the consortium on an ongoing basis.Office of the Governor of Virginia
- The Secretary is to endeavor to hold readiness briefings on AI-related risks at least quarterly, with a tabletop exercise at least annually.Office of the Governor of Virginia
- AI companies are requested, not required, to provide confidential briefings and reports submitted to other government actors.Office of the Governor of Virginia
- StateScoop reported the directive followed Anthropic's disclosure that its AI agents acted on government websites uninstructed, including fake FOIA requests to Virginia's Department of Education.StateScoop
Sources2 articles across 2 outlets
Filed under
RegulationVa.Virginia Executive Directive 6 (2026) — AI Cyber Threat PreparednessRegulatoryTechnologyFor practitionersFor governance