AI Governance Institute
← News
Corporate Policy2026-04-19

Mandatory AI Audits, Disclosures, and Red Teaming Recommended in NTIA Accountability Report

Source

NTIA

What happened

The National Telecommunications and Information Administration (NTIA) published its AI Accountability Policy Report in March 2024, outlining U.S. government recommendations for strengthening oversight of artificial intelligence systems across sectors. The report calls for mandatory AI audits, public disclosures, and liability rules tied to AI system failures, and advocates for federal investment in testing, evaluation, and red teaming standards and infrastructure. NTIA also recommends amending existing sector-specific regulations to incorporate these accountability requirements, signaling that agencies such as the FTC, FDA, and financial regulators could eventually adopt binding rules aligned with the report's framework. The report was published in response to a directive under President Biden's October 2023 Executive Order on Safe, Secure, and Trustworthy AI, which tasked NTIA with developing policy recommendations on AI accountability mechanisms within 270 days. While the report itself is non-binding, it represents an authoritative statement of federal policy direction from an agency with direct advisory influence over the White House on technology matters.

Why it matters

  • ·Sector-specific regulators including the FTC, FDA, and financial oversight bodies may initiate rulemaking aligned with the NTIA framework, creating binding audit, disclosure, and red teaming obligations that expose non-compliant organizations to enforcement action.
  • ·Organizations deploying or developing AI systems in the United States will need to operationalize structured audit processes, adversarial testing protocols, and AI-output disclosure practices to meet the benchmark expectations the report establishes ahead of formal rulemaking.
  • ·NTIA's recommendation to assign liability for AI system harms directly to deployers and developers could reshape contractual risk allocation in AI procurement agreements, increasing organizational exposure where vendor contracts do not clearly define accountability.

Governance controls affected

CMP-008Federal AI Regulatory Monitoring and Pre-Deployment VettingSAF-006Post-Deployment Adversarial Testing CadenceALC-002High-Risk AI Audit TrailMGV-006RAI Benchmark-Aligned Evaluation FrameworkPRC-006Vendor Safety Commitment Verification

What to do now

  • ☐Conduct a gap assessment of current AI audit processes against the NTIA report's core expectations, documenting findings for legal and compliance leadership review.
  • ☐Review and update AI-output disclosure practices to ensure they are documented, consistently applied, and defensible against emerging federal transparency expectations.
  • ☐Establish or formalize structured red teaming and adversarial testing protocols for AI systems operating in regulated sectors such as healthcare, finance, and hiring.
  • ☐Monitor primary sector regulators for rulemaking activity explicitly referencing the NTIA accountability framework and set up regulatory tracking alerts for FTC, FDA, and financial regulator dockets.
  • ☐Audit AI vendor and procurement contracts to assess whether liability and accountability provisions align with NTIA's recommendation to assign harm accountability to deployers and developers.

What to watch next

Compliance teams should monitor sector-specific regulators including the FTC, FDA, and federal financial regulators for proposed rulemaking that references or incorporates the NTIA accountability framework, as these agencies represent the most likely near-term vehicles for translating the report's recommendations into binding requirements. Teams should also track any follow-on guidance from NTIA or the White House Office of Science and Technology Policy that builds on the March 2024 report, particularly regarding standards for AI auditing methodologies and red teaming protocols. The interplay between the NTIA framework and any forthcoming federal AI legislation should be monitored closely, as congressional activity in this space could accelerate or redirect the regulatory trajectory the report anticipates.

Stay ahead of stories like this

Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Powered by Buttondown.

Related Coverage

Corporate Policy2026-09-07

Microsoft's 2026 RAI Report Sets a Vendor Accountability Benchmark

Microsoft published its 2026 Responsible AI Transparency Report on September 1, 2026, outlining strengthened governance structures, technical risk management processes, and expanded external red teaming across its AI products. The report creates a named set of vendor commitments that enterprise compliance teams can use as a due diligence and monitoring baseline. Organizations using Microsoft AI products at scale should review the report against their third-party AI risk programs.

Research2026-09-01

SR 26-2 Forces Banks to Rethink Model Governance From Inventory to Board Oversight

The OCC and Federal Reserve's revised model risk management guidance, SR 26-2, resets supervisory expectations for U.S. banks by shifting to a materiality-based approach that covers both traditional statistical models and AI systems, replacing the SR 11-7 framework that had governed bank model governance since 2011. Practitioner analysis from CRA identifies four areas banks must redesign: inventory scope, model tiering, validation independence, and governance alignment up to the board. A companion implementation guide from Lumenova AI adds concrete steps, including inventory rationalization and a distinct governance lane for agentic and generative AI, while a proposed academic framework maps a six-layer control architecture for bringing GenAI systems into SR 26-2 scope. Banks that still run AI governance and model risk management as separate programs face the most immediate pressure to harmonize them.

Enforcement2026-09-02

Lawsuit Forces Disclosure of Federal Frontier AI Safety Testing Rules

Nonpartisan nonprofit Protect Democracy has sued four federal agencies to compel disclosure of the Trump administration's undisclosed framework governing pre-release safety reviews of frontier AI models. The complaint alleges that critical details remain hidden from Congress and the public, including the identities of trusted partner companies, selection criteria, and the legal authority for the review process. Enterprise compliance teams face uncertainty about which frontier models have been reviewed, what standards govern that review, and whether participation in the program carries downstream procurement obligations.