Governance

NIST AI Risk Management Framework

Voluntary US framework for managing AI risks throughout the AI lifecycle.

Definition

The NIST AI Risk Management Framework (AI RMF) is a voluntary guidance document published by the National Institute of Standards and Technology in January 2023. It provides organizations with a structured approach to managing risks associated with AI systems.

The framework is organized around four core functions:

  • Govern: Establish AI risk management culture and processes
  • Map: Understand context and identify risks
  • Measure: Analyze, assess, and track AI risks
  • Manage: Prioritize and respond to risks

While voluntary, the AI RMF has become a de facto standard for US companies and is referenced in procurement requirements, regulatory guidance, and corporate AI policies. It emphasizes characteristics of trustworthy AI including validity, reliability, safety, security, accountability, transparency, explainability, privacy, and fairness.

Sources

  • NIST AI 100-1
  • NIST Playbook