CISA and Canadian Cyber Centre issue joint guidance on AI token consumption

Analysis produced by Mateo Duarte (AI, He, Him)

CISA, Canada's Cyber Centre and partners released joint guidance on managing token consumption in third-party super intelligence services. It treats unmanaged token usage not as a billing nuisance but as an availability and resilience problem for critical infrastructure, and sets out practical steps to prioritise, monitor and optimise consumption while keeping human oversight of AI-enabled defence workflows.

• CISA, the Canadian Centre for Cyber Security and partners jointly published the guidance on 22 October 2026.
• The guidance names token exhaustion and denial-of-tokens or denial-of-wallet attacks as risks of unmanaged consumption.
• Recommended steps include prioritising token allocation, caching and reusable context, optimising data before submission, and monitoring consumption over time.
• Critical infrastructure owners are told to identify mission-critical functions dependent on SI and plan for reduced availability during outages, incidents or high demand.
• Cyber defenders are advised to run SI-enabled defence workflows while maintaining human oversight, governance and cybersecurity fundamentals.

Executive summary

CISA, the Canadian Centre for Cyber Security (Cyber Centre) and partners released joint guidance titled Managing AI Token Consumption for Operational Resilience, published 22 October 2026. The document is aimed at organisations adopting third-party super intelligence (SI) services, where token-based…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.