Skip to content
AI Security

Interview question · AI Governance, Risk & Compliance

Which US AI laws matter to a security team in late 2026, and how would you build one programme that covers the main state laws?

There is no single US AI law, and the state laws keep changing. The scored answer knows which ones are in force, which were replaced, and which security obligations they actually create.

hardNewPreparation tags: OpenAI, Anthropic, GoogleUpdated Nov 2026

There is no single US AI law, and the state laws keep changing. The scored answer knows which ones are in force, which were replaced, and which security obligations they actually create.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

10 answers per topic instead of 5, plus saved progress and bookmarks · costs nothingor unlock all 529 remaining answers · $25

Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, the complete practice-test bank, and the downloadable security field guides.

6 months · One payment · No auto-renewal

What if · the follow-ups in this answer

The answer works through 4 follow-ups like an interviewer would

Your company trained a model with about 3 x 10^26 operations, has $2 billion in annual revenue, and offers it in California and New York. An internal red team finds that the deployed model gives meaningful help with an autonomous cyberattack technique that your safety framework said was mitigated.

  1. Which obligations might this trigger?
  2. What does the security team do immediately?
  3. What else must change?
  4. How do you summarise US AI law for a security team in late 2026?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Premium opens every answer and ladder.

UP NEXT ON YOUR JOURNEY
Next in this trackWhat do the UK AI cyber security code, ETSI's AI baseline standard and NIST's draft Cyber AI Profile ask for, and how would you use them?Next in this trackA security report is fully green but excludes an acquired cloud account. How would you correct it?Next in this trackAn AI posture inventory lists every model but misses tool permissions. What security decisions remain unsupported?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.