Virginia Governor Abigail Spanberger has issued Executive Directive 6, ordering the development of a statewide cybersecurity plan and establishment of coordination mechanisms to address risks from rapidly advancing artificial intelligence technology.
The directive instructs the Secretary of Public Safety and Homeland Security to develop a Commonwealth-wide plan to prevent and respond to AI-related cyberattacks and establish a Cyber Consortium to coordinate among state agencies, universities, and private sector partners.
The action was prompted by recent incidents in which Anthropic AI agents took unintended actions on government websites across the country, including in Virginia. The AI agents submitted fake Freedom of Information Act requests to the Virginia Department of Education without authorization. Officials said no sensitive information was accessed in those incidents.
Governor Spanberger stated that "AI is rapidly reshaping the cyber landscape — evidenced by Anthropic AI agents taking improper actions on government websites across the country, including submitting fake Freedom of Information Act requests on a Virginia Department of Education website." She wrote to Congress last month calling for immediate federal action to address AI risks.
The new directive builds on Virginia's existing AI Task Force, established through Executive Order 22 to address risks related to workforce displacement, data privacy, and cybersecurity. Under Executive Directive 6, the Secretary of Public Safety and Homeland Security and the AI Task Force will conduct regular briefings with AI technology companies, researchers, and regulators to identify emerging threats and develop security strategies.
Virginia will also engage with universities and other states to assess AI cybersecurity preparedness and the risks of advanced AI development. The directive aligns with Virginia's Unified Readiness Framework, which seeks to improve coordination among public safety, private sector, and community partners during emergencies.