Abstract

The transition from siloed data lakes to enterprise-grade, trusted artificial intelligence (AI) infrastructure represents one of the most consequential technological challenges facing U.S. critical infrastructure agencies today. This paper presents a comprehensive assessment of data quality standards, governance maturity frameworks, and AI readiness levels across the 16 federally designated critical infrastructure sectors, with particular focus on civilian federal agencies serving as Sector Risk Management Agencies (SRMAs). Drawing on the latest federal audit reports from the Government Accountability Office (GAO), Office of Management and Budget (OMB) memoranda M-25-21 and M-25-22 (April 2025), CISA's Cybersecurity Performance Goals 2.0 (December 2025), the Stanford AI Index 2025, and IDC's enterprise AI maturity study (2025), this research synthesizes quantitative and qualitative evidence to construct a multi-dimensional AI readiness index for critical infrastructure agencies. Findings reveal that while federal agencies nearly doubled their reported AI use cases from 571 in 2023 to 1,110 in 2024 with generative AI use cases increasing ninefold fundamental data governance gaps persist. Only 28% of organizations have formally defined AI oversight roles, and fewer than 15% of agencies have networks fully optimized for AI workloads. This paper proposes a five-tier Trusted AI Infrastructure Maturity Model (TAIMM), sector-specific governance recommendations, and a strategic roadmap for closing the gap between data lake accumulation and operationalized AI capability.

References

• Department of Homeland Security. (2024). Critical Infrastructure Sectors. CISA. https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors
• National Security Council. (2024). Strategic Guidance and National Priorities for U.S. Critical Infrastructure Security and Resilience, 2024–2025. DHS. https://www.dhs.gov
• Dixon, J. (2010). A Comparison of Data Lake Technologies. Pentaho Blog. [Originating reference for the data lake concept.]
• Gartner, Inc. (2024). The Cost of Poor Data Quality. Gartner Research. Stamford, CT.
• Executive Office of the President. (2023). Executive Order 14110: Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence. Federal Register, 88(210), 75191–75226.
• Office of Management and Budget. (2025, April 3). M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public Trust. Executive Office of the President.
• Office of Management and Budget. (2025, April 3). M-25-22: Driving Efficient Acquisition of Artificial Intelligence in Government. Executive Office of the President.
• U.S. Government Accountability Office. (2025, July 29). Artificial Intelligence: Generative AI Use and Management at Federal Agencies (GAO-25-107653). GAO. https://www.gao.gov/products/gao-25-107653
• U.S. Government Accountability Office. (2024, December 18). Artificial Intelligence: DHS Needs to Improve Risk Assessment Guidance for Critical Infrastructure Sectors (GAO-25-107435). GAO. https://www.gao.gov/products/gao-25-107435
• Inmon, B., & Linstedt, D. (2014). Data Architecture: A Primer for the Data Scientist. Morgan Kaufmann.
• Fang, H. (2015). Managing data lakes in big data era. 2015 IEEE International Conference on Cyber Technology in Automation, Control, and Intelligent Systems (CYBER), 820–824.
• Hai, R., Geisler, S., & Quix, C. (2016). Constance: An intelligent data lake system. Proceedings of the 2016 ACM SIGMOD International Conference on Management of Data, 2097–2100.
• Eckerson, W. (2023). Federal Data Infrastructure Maturity: From Accumulation to Activation. TDWI Research Report. Renton, WA: The Data Warehousing Institute.
• Wang, R. Y., & Strong, D. M. (1996). Beyond accuracy: What data quality means to data consumers. Journal of Management Information Systems, 12(4), 5–33.
• DAMA International. (2017). DAMA-DMBOK: Data Management Body of Knowledge (2nd ed.). Technics Publications.
• Firmani, D., Mecella, M., Scannapieco, M., & Batini, C. (2016). On the meaningfulness of 'big data quality.' Data Science and Engineering, 1(1), 6–20.
• National Institute of Standards and Technology. (2024). National Data Quality Framework: Standards and Best Practices for Federal Data Assets. NIST Special Publication. U.S. Department of Commerce.
• Sambasivan, N., Kapania, S., Highfill, H., et al. (2021). 'Everyone wants to do the model work, not the data work': Data cascades in high-stakes AI. Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems, 1–15. ACM.
• IDC. (2025). Scaling Enterprise AI Responsibly: The Critical Role of Data Readiness (IDC InfoBrief, doc #US53841625). IDC Research.
• Cath, C., Wachter, S., Mittelstadt, B., Taddeo, M., & Floridi, L. (2018). Artificial intelligence and the 'good society': The US, EU, and UK approach. Science and Engineering Ethics, 24(2), 505–528.
• AI in Government Act of 2020, Division U, Title I of the Consolidated Appropriations Act, 2021, Pub. L. No. 116-260, 134 Stat. 1182 (2020).
• National Institute of Standards and Technology. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0). NIST AI 100-1. U.S. Department of Commerce.
• International Association of Privacy Professionals. (2025). AI Governance Profession Report 2025. IAPP. Portsmouth, NH.
• U.S. Government Accountability Office. (2025, July). Artificial Intelligence: Federal Efforts Guided by Requirements and Advisory Groups (GAO-25-107933). GAO. https://files.gao.gov/reports/GAO-25-107933/index.html
• Gartner, Inc. (2024). AI Readiness Assessment: Key Dimensions for Enterprise Organizations. Gartner Research Note G00797412. Stamford, CT.
• Oxford Insights. (2024). Government AI Readiness Index 2024. Oxford Insights. Oxford, UK. https://oxfordinsights.com/ai-readiness/ai-readiness-index/
• Lee, J., Bagheri, B., & Kao, H. A. (2015). A cyber-physical systems architecture for Industry 4.0-based manufacturing systems. Manufacturing Letters, 3, 18–23.
• Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2023). Guide to Industrial Control Systems (ICS) Security. NIST Special Publication 800-82 Rev. 3. NIST.
• Cybersecurity and Infrastructure Security Agency. (2025, December 11). Cross-Sector Cybersecurity Performance Goals 2.0. CISA. U.S. Department of Homeland Security.
• Cisco. (2025). Cisco AI Readiness Index 2025. Cisco Systems, Inc. San Jose, CA. https://www.cisco.com/c/m/en_us/solutions/ai/readiness-index.html
• CMMI Institute. (2022). CMMI V2.0 Model Overview. CMMI Institute. Pittsburgh, PA.
• Earley Information Science. (2023). Data Management Maturity Model (DMM): Assessment Framework for Government Organizations. EIS. Arlington, VA.
• Office of Management and Budget. (2024). Consolidated AI Use Case Inventory: Federal Agency AI Deployments 2023–2024. OMB. Washington, D.C.
• Federal Chief Information Officers Council. (2023). Federal Data Strategy: 2023 Action Plan Progress Report. OMB. Washington, D.C.
• General Services Administration. (2024). FedRAMP Authorization for AI Tools: Updated Framework. GSA. Washington, D.C.
• U.S. Department of Energy. (2024). DOE AI and Technology Office: Strategic Plan for AI Adoption in Energy Infrastructure. DOE. Washington, D.C.
• U.S. Department of Transportation. (2024). DOT AI Strategic Plan 2024–2027: Advancing Safe and Trusted AI in Transportation. DOT. Washington, D.C.
• Financial Industry Regulatory Authority. (2024). FINRA 2024 Annual Report: AI and Data Governance in Financial Markets Regulation. FINRA. Washington, D.C.
• U.S. Environmental Protection Agency. (2024). Water Sector Cybersecurity and AI Risk Assessment: 2024 Progress Report. EPA Office of Water. Washington, D.C.
• Terrizzano, I., Schwarz, P., Roth, M., & Colino, J. E. (2015). Data wrangling: The challenging & overlooked opportunity. CIDR 2015. Asilomar, CA.
• Office of Management and Budget. (2019). Federal Data Strategy: Leveraging Data as a Strategic Asset. OMB. Washington, D.C.
• Brundage, M., Avin, S., Clark, J., et al. (2018). The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigation. arXiv:1802.07228.
• Mikalef, P., Boura, M., Lekakos, G., & Krogstie, J. (2019). Big data analytics and firm performance: Findings from a mixed-method approach. Journal of Business Research, 98, 261–276.
• U.S. Government Accountability Office. (2023, December 12). Artificial Intelligence: Agencies Need to Develop Inventories and Comply with Key Requirements (GAO-24-105980). GAO.
• Office of Personnel Management. (2025). Federal AI Workforce Strategy: Building AI Competencies Across the Civil Service. OPM. Washington, D.C.
• Hunton Andrews Kurth. (2025). OMB Issues Revised Policies on AI Use and Procurement by Federal Agencies. Hunton Privacy Blog. https://www.hunton.com
• Flexential. (2025). State of AI Infrastructure Report 2025. Flexential Corp. Charlotte, NC. https://www.flexential.com/resources/report/2025-state-ai-infrastructure
• Jobin, A., Ienca, M., & Vayena, E. (2019). The global landscape of AI ethics guidelines. Nature Machine Intelligence, 1(9), 389–399.
• Stanford Human-Centered Artificial Intelligence. (2025). AI Index Report 2025. Stanford HAI. Stanford, CA. https://hai.stanford.edu/ai-index/2025-ai-index-report
• Lorentzen, P. (2025). Back to basics: Data integrity and governance as the foundation of AI performance. Davos 2025 Technology Forum Commentary. World Economic Forum. Geneva, Switzerland.
• Agumagu, E. R., Ekine, E. U., Onyekwuluje, T. P., & Uwaezuoke, E. C. (2024). The Role of Automation in Integrating Various Telecommunication Projects. World Journal of Innovation and Modern Technology, 8(6). DOI:10.56201/wjimt.v8.no6.2024.pg217.228
• Agumagu, E. R., Ekine, E. U., &Uwazuoke, E. (2024). The Challenges of Managing International Telecom Projects Across Diverse Cultural Contexts and How to Overcome Them. International Journal of Social Sciences and Management Research, 10(11).
• Agumagu, E. R., Ekine, E. U., &Uwaezuoke, E. (2024). The Challenges of Managing International Telecom Projects Across Diverse Cultural Contexts and How to Overcome Them. International Journal of Social Sciences and Management Research E-ISSN 2545-5303 , 10(11), 513–524. DOI:10.56201/ijssmr.v10.no11.2024.pg.513.524