Tracking Trump's AI Cybersecurity Deadlines

1 The order that started the clock

Executive Order 14409, Promoting Advanced Artificial Intelligence Innovation and Security, was signed June 2, 2026, per the White House presidential actions page. It loads most assignments onto two deadlines — 30 and 60 days from signature — and states that nothing in its frontier-model section authorizes mandatory licensing or preclearance of new AI models: those provisions are voluntary industry collaboration.

2 What was due in 30 days

Within 30 days, the order directs the Committee on National Security Systems and the Secretary of War to prioritize cyber defense of their systems, and directs Homeland Security, through the CISA Director, to release Binding Operational Directives expediting civilian federal cyber defense and expanding access to AI-enabled defensive tools. Treasury, with NSA and CISA, is directed to form a voluntary AI cybersecurity clearinghouse, and OMB to determine whether grant funding can support AI vulnerability detection.

3 What was due in 60 days

The 60-day assignments are narrower: a classified benchmarking process assessing the cyber capabilities of AI models and setting the covered frontier model threshold, with designation made by the NSA Director, plus a voluntary framework under which developers could provide pre-release access of up to 30 days. Separately, OPM is directed to expand the Tech Force Information Cybersecurity Specialist hiring pathways.

4 The accountability ledger

Three months after signature, the honest ledger has three columns. Documented: the order itself and the machinery it names, such as CISA, the DHS component responsible for federal cybersecurity coordination, per its Wikipedia summary. Not independently verifiable: whether the prioritization directives changed operations, since the order requires no public reporting. Unavailable evidence is not missed deadlines — this ledger asserts none.

5 What would count as compliance

Some assignments leave public traces by nature: released CISA directives would be checkable, a clearinghouse could surface through agency statements, and grant redirections would appear in budget documents. Others — classified benchmarking, systems defense prioritization — are structurally unlikely to produce public confirmation.

6 Why the ledger matters

The order's significance is partly in what it rules out: Section 3 states it does not authorize mandatory licensing or permitting of new AI models, so the frontier-model apparatus rests on voluntary collaboration. A public scorecard therefore undercounts activity — but accepting silence as success would be the opposite error.

7 Bottom line

EO 14409 set a dense schedule of assignments, most not designed to produce public artifacts. The documented record shows the order and its deadlines, not most deliverables. Watch for published CISA directives, clearinghouse announcements, and OPM hiring expansions — the items most likely to convert unavailable evidence into checkable fact.