Narrative Goldmine

NIST AI Risk Management Framework

7 min read

Properties

Type
  • Class
Resource
  • urn:ngm:class:nist-ai-risk-management-framework
Domain
  • governance
Status
  • stable
Maturity
  • established
Quality
  • 0.72
Is a
Has part
Requires
Enables
Generated
  • by: process:vault-migrate/1.0 · at: 2026-09-22T12:41:39.024503178Z
Bridges to
Contrasts with
Implements
Links
Page resource
  • urn:visionflow:page:990fc9415832112b020217eed731bb846cc66213ca36698d622b9dc3c7017a8f
Related to
Standardized by
Supports

The NIST AI Risk Management Framework (AI RMF 1.0), published by the National Institute of Standards and Technology in January 2023, is a voluntary, use-case-agnostic guidance document that helps organisations design, develop, deploy, and evaluate AI systems in a manner that is trustworthy and risk-informed. It organises AI risk management activities into four core functions — GOVERN, MAP, MEASURE, and MANAGE — and supports cross-functional integration of safety, reliability, fairness, privacy, and accountability considerations throughout the AI lifecycle. The framework is accompanied by a Playbook of suggested actions and is intended to complement existing risk management practices rather than replace sector-specific regulations or standards.

Overview

  • The NIST AI RMF emerged from a multi-year, community-driven process mandated by the US National AI Initiative Act of 2020, with input from industry, academia, civil society, and government.
  • Unlike earlier NIST security frameworks—most notably the NIST Cybersecurity Framework—the AI RMF was designed from the outset to address harms that are socio-technical in nature: bias, opacity, loss of human agency, and dual-use misuse risks, in addition to conventional security and reliability concerns.
  • The framework applies to any organisation that designs, develops, deploys, operates, or evaluates AI systems, regardless of sector, scale, or geography.
  • It is intentionally non-prescriptive: organisations select which subcategories and suggested actions from the accompanying AI RMF Playbook are most relevant to their context and risk appetite.
  • The US Executive Order on Safe, Secure, and Trustworthy AI (October 2023) directed federal agencies to align their AI acquisition and deployment practices with the AI RMF, significantly elevating its practical importance.

Key Components

Four Core Functions

  • GOVERN — Establishes the organisational policies, culture, roles, and accountability structures needed to embed AI Risk Assessment into enterprise decision-making. Includes assigning roles for Stakeholder Engagement, defining risk tolerance, and setting incident-response expectations.
  • MAP — Identifies and categorises AI risks in context: who is affected, what harms could arise, what is the intended use, and where in the AI Lifecycle Management chain risks emerge. Supports structured risk identification before deployment.
  • MEASURE — Defines quantitative and qualitative methods for analysing, assessing, and tracking identified risks, including technical evaluation of Explainable AI outputs, performance across demographic subgroups for AI Fairness, and ongoing AI Incident Reporting processes.
  • MANAGE — Prioritises and treats identified risks through controls, mitigations, residual-risk acceptance, and response planning. Ensures that risk decisions are documented and revisited as systems evolve or operating contexts change.

AI RMF Playbook

  • Companion document providing suggested actions and references for each subcategory within the four functions.
  • Enables practitioners to translate high-level framework goals into operational checklists without imposing a single methodology.

AI RMF Profiles

  • Sector- or use-case-specific adaptations of the core framework, developed collaboratively with stakeholder communities.
  • Early profiles target domains such as generative AI, financial services, and healthcare, mapping AI RMF subcategories to sector regulations and Technical Standard requirements.

Trustworthy AI Characteristics

  • The AI RMF defines trustworthiness through seven properties: accountable, explainable, fair with bias managed, interpretable, privacy-enhanced, reliable and safe, and secure and resilient.
  • These properties directly inform the MEASURE function’s evaluation criteria and connect to Responsible AI commitments.

Applications / Use Cases

  • Federal Agency Compliance — US agencies use the AI RMF to structure internal governance boards, conduct AI impact assessments, and document risk decisions in procurements involving Machine Learning Operations pipelines.
  • Enterprise AI Governance — Large enterprises in finance, healthcare, and telecommunications adopt the GOVERN function to embed AI oversight into existing board-level risk committees, linking to Data Governance programmes.
  • Generative AI Deployment — The NIST Generative AI Profile (NIST AI 600-1) extends the AI RMF to address risks specific to large language models and diffusion models, covering hallucination, provenance, and content safety alongside standard risk categories.
  • Procurement and Vendor Assessment — Buyers use MAP and MEASURE functions to evaluate vendor AI systems against trustworthiness criteria prior to acquisition, complementing contractual obligations derived from the EU AI Act or national equivalents.
  • Research and Development Governance — Academic and industrial research teams use the framework’s MAP function to document intended use, foreseeable misuse, and societal impact during the early stages of AI Safety research programmes.
  • Interoperability with ISO Standards — Organisations holding or pursuing IEC 42001 certification use the AI RMF as a supplementary layer, mapping GOVERN/MAP/MEASURE/MANAGE to ISO clauses on AI management systems.
  • Model Cards and Documentation — Teams align MEASURE outputs with structured artefacts such as Model Cards and datasheets, creating auditable evidence trails for internal review boards and external regulators.

Standards & Context

  • Issuing body: National Institute of Standards and Technology (NIST), US Department of Commerce
  • Publication: NIST AI 100-1, January 2023 (AI RMF 1.0)
  • Mandate: Directed by the US National AI Initiative Act of 2020; referenced by the 2023 Executive Order on AI
  • Companion publications:
    • NIST AI 100-1 — Core framework document
    • NIST AI 600-1 — Generative AI Profile extending AI RMF to foundation models
    • NIST SP 1270 — Towards a Standard for Identifying and Managing Bias in Artificial Intelligence
  • Related international standards:
    • IEC 42001 — AI Management System Standard (provides certification path complementing AI RMF)
    • IEC 23894 — AI risk management guidance aligned with ISO 31000
    • IEEE 7000 series — Ethically aligned design standards
  • Regulatory interoperability:
    • The EU AI Act and the AI RMF share overlapping risk-tier concepts; NIST has published cross-walking guidance
    • The UK AI Safety Institute references AI RMF principles in its evaluations framework
    • Singapore’s AI Governance Framework draws on the same trustworthiness characteristics
  • Sector profiles in development (as of knowledge cutoff):
    • Generative AI (NIST AI 600-1, published July 2024)
    • Financial services, healthcare, and autonomous vehicles profiles under community development

Semantic Classification

Current Landscape (2026)

  • NIST published NIST AI 600-1, the Generative AI Profile, on 26 July 2024 as the first cross-sectoral companion to AI RMF 1.0, defining 12 GenAI-specific risk categories (CBRN information, confabulation, data privacy, information integrity, value chain and others) and over 200 suggested actions mapped to the GOVERN, MAP, MEASURE and MANAGE functions.
  • The framework’s political anchor shifted sharply: President Trump’s EO 14148 (20 January 2025) rescinded EO 14110, and EO 14179 (23 January 2025) reoriented federal AI policy toward deregulation and competitiveness, though AI RMF 1.0 itself was not rescinded and remains the operational baseline.
  • America’s AI Action Plan (23 July 2025) names NIST in over 25 actions and directs the AI RMF to be revised to eliminate references to misinformation, diversity/equity/inclusion and climate change; the RMF is now formally in revision for a future version.
  • Institutional rebranding continued: the US AI Safety Institute became the Center for AI Standards and Innovation (CAISI) in June 2025 under Commerce Secretary Lutnick, and on 29 May 2026 NIST renamed the AI Safety Institute Consortium (over 280 members) the NIST Artificial Intelligence Consortium via Federal Register notice, dropping “safety” and broadening scope to measurement, innovation and adoption.
  • NIST is expanding the profile family: the Cyber AI Profile (NIST IR 8596) preliminary draft landed 16 December 2025 bridging CSF 2.0 and the AI RMF, NIST AI 800-4 on post-deployment monitoring appeared in March 2026, and an AI RMF Profile for Trustworthy AI in Critical Infrastructure reached concept-note stage on 7 April 2026.
  • Implementation scaffolding is maturing alongside the core: NIST is developing SP 800-53 Control Overlays for Securing AI Systems (COSAiS), while the Cloud Security Alliance published crosswalks (AICM to AI 600-1, August 2025) and a draft NIST AI RMF Agentic Profile (27 March 2026) to extend governance to autonomous, tool-using agents not contemplated by the original documents.
  • Open challenges as of 2026 include reconciling the de-emphasis of societal-risk language (misinformation, equity, environmental impact) with enterprises that still rely on those categories, the absence of binding federal enforcement, and gaps in governing agentic autonomy, continuous post-deployment drift and third-party model supply chains.

References

Provenance

Graph View

Backlinks