🔍 Read the full analysis: How A16z Plans To Defend US Infrastructure At AI Speed on ThorstenMeyerAI.com
Get movie nights delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Andreessen Horowitz published a proposal on Nov. 12 for protecting a few hundred critical infrastructure operators and shared vendors with AI-assisted cyber defenses. It calls for White House oversight, sector targets signed by CEOs and monthly reporting, but no government adoption, costs or implementation commitments are established in the source material.
Venture firm Andreessen Horowitz (a16z) published a proposal on Nov. 12 for using AI and sector-specific targets to strengthen cybersecurity at a few hundred operators and shared vendors whose failure, it argues, could disrupt critical US services. The plan calls for the White House’s Super Intelligence Force to set targets, industry CEOs to answer for results and existing information-sharing centers to track progress; it is a proposal, not adopted government policy.
The plan, titled “Super Intelligence-Era Critical Infrastructure Cyber Defense Plan,” was written by Anne Neuberger, an a16z general partner and head of global affairs. The firm said Neuberger also outlined it in an opinion piece for The Wall Street Journal. It focuses on five sectors: power, banking and payments, water, communications and hospitals.
Rather than attempt to secure every organization, the proposal prioritizes a few hundred critical operators and their shared vendors. Examples named in the source include large transmission substations, payment systems such as Fedwire and ACH, major-city water utilities, core telecommunications and 911 systems, regional trauma centers and health-record vendors. The argument is that disruption at these concentrated points could have wider effects.
Each sector’s CEO council would sign three targets: no internet-exposed control systems, passing 72-hour manual-operation drills, and containing critical vulnerabilities—through a patch or compensating control—within a specified time. The plan says top targets should be contained within six months. Industry information-sharing and analysis centers, or ISACs, would coordinate work and submit anonymized sector metrics monthly. Falling behind would prompt a CEO-level review with the White House task force.
The a16z plan in motion · schematic
From a CEO pledge to the President’s table
How the proposed cyber defense plan for power, banks, water, telecom and hospitals is meant to work, step by step. It is a proposal, not policy.
The chain, step by step
Each circle is one step of the plan; the ring marks the step being explained.
What happens at each step
- 1CEO pledgeA CEO council, with 2–3 CEOs per sector, commits each sector to national targets set by the White House’s SI Force.
- 2Three targets, signedZero internet-exposed control systems72-hour manual-operation drills passedCritical flaws contained within a set time
- 3DrillsTop targets prove they can run without IT for 72 hours. A joint cross-sector drill, modeled on GridEx, within 3-6 months.
- 4Monthly scorecardsSector ISACs report anonymized metrics to the SI Force. A sector behind target triggers a CEO-level review.
- 5President councilThe CEO council is publicly accountable for results and meets the President every six months.
Source: a16z, “Super Intelligence-Era Critical Infrastructure Cyber Defense Plan”, November 12, 2026, incl. its governance table (“For illustrative purposes only”). The chain is a schematic of the proposal, not an existing program.
Graphic: Powered by Thorsten Meyer AI
Accountability Across Critical Sectors
The proposal would shift some cybersecurity work from voluntary information exchange toward measurable sector targets and executive accountability. If implemented, public-company boards would attest to progress, and regulators would accept those attestations in place of duplicate audits, according to the plan. Large companies would also be expected to support smaller organizations, including rural hospitals, utilities, carriers and community banks.
The approach matters because essential services depend on interconnected operators and suppliers. A vulnerability or outage at a shared vendor could affect multiple organizations, while a disruption to power, payments, communications or health care could extend beyond a single company. a16z’s proposal treats this concentration as a way to focus limited defensive resources, rather than as proof that the risks are already controlled.
The plan also links cybersecurity to AI’s increasing speed. It argues that AI may help defenders find exposed systems, rank risks and generate fixes, including workarounds for equipment that cannot be patched. The same faster discovery and exploitation could benefit attackers, however. The proposal itself frames the central uncertainty as whether defensive tools can be applied quickly enough.
Popular right now
Dyson Ball Animal 3 Upright Corded Vacuum
Shark WANDVAC Power PET Cordless Handheld Vacuum, White, WV410WH
KitchenAid Classic Series 4.5-Quart Tilt-Head Stand Mixer, Onyx Black
As an affiliate, we earn on qualifying purchases.
From Federal Task Force to Sector Targets
The plan is addressed to the White House’s Super Intelligence Force. The source says President Donald Trump announced the task force on Oct. 4, 2026, and named National Intelligence Director Jay Clayton to lead it, citing NBC News. The president described its remit as coordinating federal engagement with groups including critical infrastructure providers and superintelligence companies.
a16z proposes that the task force set national targets, chair monthly reviews with CEOs and address policy or funding obstacles. A CEO council would include two or three CEOs per sector; cloud and AI-lab CEOs would participate as non-voting members. The plan’s governance table, which a16z labels “for illustrative purposes only,” assigns existing federal agencies continuing roles: Energy for power, Treasury for banks, the EPA for water, the FCC for communications and HHS for hospitals.
ISACs already share sector threat information, according to the source. Under this proposal, they would take on a wider operational role: run shared AI tools, coordinate fixes with vendors, arrange mutual aid and prepare scorecards. Neuberger’s prior government experience includes work at the NSA and as deputy national security adviser for cyber and emerging technology, as described in the source material.
“AI is shrinking the time between when a weakness is found and when it is exploited. Defenders who still work at human speed will lose that race.”
— Anne Neuberger, in a16z’s plan
Policy, Costs and Liability Remain Open
The document is a venture-firm proposal; the source material does not establish that the White House or any federal agency has accepted or begun implementing it. It also gives no cost estimate, funding commitments, implementation schedule for all targets or detailed rules for measuring compliance.
a16z calls for long-term reauthorization of the Cybersecurity Information Sharing Act of 2015 and a possible safe harbor for companies that meet outcomes-based targets. The source does not specify the legal terms, which firms would qualify or how the protection would interact with existing regulatory duties. The proposal’s anonymized monthly reporting and board attestations are described, but their precise verification and public-disclosure arrangements remain unclear.
The source also notes that a16z invests in frontier AI labs and cybersecurity companies, sectors that could receive roles under the proposed structure. The plan does not spell out how potential conflicts of interest would be handled. Its governance chart is explicitly illustrative, and the material provided does not confirm participation by named companies or sector councils.
Federal Response and Target Design
The next milestone is whether the White House’s Super Intelligence Force or relevant agencies respond to the proposal, adopt any of its targets, or set up the suggested CEO council. The plan would require additional decisions about sector baselines, deadlines, funding, reporting and how regulators would recognize board attestations.
Any move toward implementation would also need to clarify the proposed legal protections, including the scope of a possible safe harbor and the status of CISA’s reauthorization. Until those decisions are made public, the targets and governance model remain recommendations rather than binding requirements. The source material provides no confirmed timetable for a government decision.
Key Questions
What did a16z propose?
a16z proposed a White House-led cybersecurity effort focused on a few hundred critical infrastructure operators and shared vendors, using AI-assisted tools, sector targets and monthly scorecards.
Which sectors would the plan cover?
The proposal names power, banking and payments, water, communications and hospitals.
Is the proposal now US government policy?
No. The source describes it as a proposal and does not report that the White House or federal agencies have adopted it.
What targets would companies sign?
Sector CEOs would sign targets for eliminating internet-exposed control systems, passing 72-hour manual-operation drills and containing critical vulnerabilities within set time limits.
What legal changes does a16z seek?
The plan calls for long-term reauthorization of the Cybersecurity Information Sharing Act of 2015 and proposes considering a safe harbor for companies that meet outcomes-based targets. The terms and status of either measure are not settled in the source material.
Source: ThorstenMeyerAI.com
