TL;DR
Andreessen Horowitz published a proposal on November 12 for protecting selected U.S. infrastructure operators from cyber threats that AI could accelerate. It calls for signed security targets, 72-hour manual-operation drills and monthly reporting, with government coordination and possible legal protections for companies that meet targets. The proposal has no stated cost and has not been adopted as policy.
The proposal, titled “Super Intelligence-Era Critical Infrastructure Cyber Defense Plan,” sets out three targets for participating sectors: eliminate internet-exposed control systems, pass drills showing operators can work manually for 72 hours, and contain critical vulnerabilities within a set time. It says the highest-priority targets should be contained within six months. Replacing unsupported equipment could take two to five years, according to the plan.
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
For oversight, a proposed CEO council, with two or three executives per sector, would commit to targets set by the White House’s Super Intelligence Force. Sector information-sharing and analysis centers, or ISACs, would coordinate work and send anonymized scorecards monthly. Falling behind a target would prompt a CEO-level review; the council would meet with the president every six months. The plan also proposes a cross-sector exercise modeled on GridEx within three to six months.
a16z says artificial intelligence could help defenders find exposed systems, prioritize risks and generate fixes, including workarounds for equipment that cannot be patched. The firm argues that AI may also let attackers find and exploit weaknesses faster. It proposes long-term reauthorization of the Cybersecurity Information Sharing Act of 2015 and raises the possibility of a safe harbor for companies that meet outcomes-based targets. These are recommendations, not current requirements or protections.
Targets for Essential Services
The proposal shifts attention from trying to secure every system to concentrating resources on operators and vendors whose failure could disrupt services across multiple regions. Its focus on manual operation is intended to test whether essential services can continue during a serious digital outage, while common targets and scorecards could give officials a way to track progress across sectors.
The plan’s urgency rests on a claim about AI-driven speed: a16z says AI may shorten the time between discovery of a software weakness and its exploitation. The document does not provide independent evidence or measurements for that claim. If adopted, its proposed deadlines could put pressure on operators to find and contain vulnerabilities quickly, even where aging equipment is difficult to replace.
The suggested legal protections could affect companies’ willingness to share cyber threat information or take part in coordinated exercises. But the proposal does not specify the scope of any safe harbor, how targets would be enforced, or who would pay for the work. Those choices would determine how much the plan changes companies’ obligations and operating costs.
Products Worth Considering
Jackery Explorer 1000 v2 Portable Power Station
Logitech MX Master 4 Ergonomic Wireless Mouse with Haptic Feedback, Graphite
Samsung 32-Inch Odyssey G5 QHD 180Hz Gaming Monitor
As an affiliate, we earn on qualifying purchases.
A Proposal for the SI Force
The plan is addressed to the White House’s Super Intelligence Force. The source material says President Donald Trump announced the task force on October 4, 2026, and named National Intelligence Director Jay Clayton to lead it, citing NBC News. It describes the force as coordinating federal engagement with critical infrastructure providers and AI companies.
Neuberger previously worked on infrastructure security at the NSA and as deputy national security adviser for cyber and emerging technology, according to her account in the plan. She now serves as a general partner and head of global affairs at a16z. The firm also invests in AI labs and security companies, an interest relevant to readers evaluating its recommendations and its proposed role for technology companies.
a16z says Neuberger outlined the plan in a Wall Street Journal opinion piece as well. The proposal’s governance diagram is identified as illustrative. It does not establish that a CEO council, reporting system or exercise schedule currently exists.
““AI is shrinking the time between when a weakness is found and when it is exploited. Defenders who still work at human speed will lose that race.””
— Anne Neuberger, a16z General Partner and Head of Global Affairs, in the plan
Policy, Costs and Safeguards
The proposal has not been adopted as government policy, and the source material does not say whether the White House or the Super Intelligence Force has endorsed it. It names no budget or funding source, and does not identify the operators and vendors that would be included, beyond examples such as major substations, payment networks, large-city water utilities, core telecom systems and regional trauma centers.
It is also unclear how officials would define each target, verify results or respond if a company misses a deadline. The suggested safe harbor remains a possibility rather than a defined legal provision. The source does not provide independent data to establish how quickly AI is changing the threat or how well AI-generated fixes would work on legacy systems.
White House Response and Milestones
The next step would be a decision by the White House on whether to consider or adopt the proposal. If officials move forward, they would need to set sector targets, determine which operators participate, establish reporting and review procedures, and address funding and legal protections.
The plan’s suggested timetable calls for a cross-sector drill within three to six months and containment of top-priority targets within six months. These are proposed milestones, not scheduled events. No official implementation date or government response is provided in the source material.
Key Questions
Has the U.S. government adopted the a16z plan?
No adoption is reported. It is a proposal addressed to the White House’s Super Intelligence Force.
Which infrastructure sectors would it cover?
The proposal names power, banking and payments, water, communications and hospitals.
What security targets does it set out?
It proposes eliminating internet-exposed control systems, passing 72-hour manual-operation drills and containing critical vulnerabilities within a set period.
How much would the plan cost?
The source material gives no cost estimate or funding source.
When would drills and security targets happen?
The proposal suggests a cross-sector drill within three to six months and containment of top-priority targets within six months. These dates are recommendations, not confirmed government deadlines.
Source: Thorsten Meyer AI
