Framework · Last verified
AI Risk Management Framework
NIST AI RMF 1.0 is a voluntary NIST framework for managing AI risk, built around four functions: Govern, Map, Measure, Manage. NIST states the framework "is intended for voluntary use"; it carries no certificate or third-party assessment scheme of its own.
- Class
- Framework
- Owner
- National Institute of Standards and Technology (NIST)
- Who asks for it
- Voluntary
- Last verified
What it is
NIST's own cover page names the document "NIST AI 100-1 — Artificial Intelligence Risk Management Framework (AI RMF 1.0)", published January 2023 (DOI 10.6028/NIST.AI.100-1).
NIST describes the framework's structure in its own words: "As illustrated in Figure 5, the Core is composed of four functions: GOVERN, MAP, MEASURE, and MANAGE." The accompanying figure caption adds: "Governance is designed to be a cross-cutting function to inform and be infused throughout the other three functions."
NIST publishes companion resources alongside the framework, including the AI RMF Playbook, the AI RMF Roadmap, AI RMF Crosswalks, and the Generative Artificial Intelligence Profile (NIST-AI-600-1). NIST describes the Playbook as "An online companion resource to the AI RMF ... available to help organizations navigate the AI RMF and achieve its outcomes through suggested tactical actions."
Who owns it
The AI RMF is developed and owned by NIST, a non-regulatory agency of the U.S. Department of Commerce.
Sources
- NIST — NIST AI 100-1, Artificial Intelligence Risk Management Framework (AI RMF 1.0) ↗ — accessed
- NIST — AI Risk Management Framework (programme page) ↗ — accessed
- NIST AI Resource Center — Crosswalks (airc.nist.gov) ↗ — accessed
- NIST AI Resource Center — NIST AI RMF to ISO/IEC FDIS 42001 AI Management System Crosswalk (PDF, submitted by Microsoft) ↗ — accessed
Last verified:
This page is for information only; it does not accredit, certify or endorse any organisation. Requirements and programs change — always confirm against the primary source linked above.