The US national cyber director has characterised the current period of AI-driven change as governments "buying time" in a race between innovation and security, arguing that state institutions are managing risk rather than closing it and that the balance between enabling AI adoption and defending against AI-enabled attack remains unresolved.

The framing is a pacing problem rather than a technology problem: defensive guidance, evaluation standards and procurement rules are being written while the underlying capability changes on a quarterly cadence. For allied governments the practical implication is that published frameworks — including Australia's AI guidance and the Essential Eight — are being consumed faster than they can be revised. See ai-orchestrated-papercut-campaign-compromised-395-organisations-most-in-educatio.md and us-cyber-command-taps-intelligence-veteran-as-its-first-senior-ai-leader.md.