NIST AI Risk Management Framework (AI RMF)
A voluntary, rights-preserving and use-case-agnostic framework for helping organizations manage risks to individuals, organizations, and society across the AI lifecycle.
The AI RMF provides a common operating language for product, risk, legal, security, data, and leadership teams. It helps translate high-level responsible-AI commitments into documented outcomes and evidence without prescribing one technology or control set.
A software provider uses Govern to assign accountability, Map to document the deployment context, Measure to evaluate reliability and harmful bias, and Manage to approve controls and residual-risk decisions before launch.
The framework is voluntary and does not confer certification or legal compliance. It must be tailored to context, and completing activities mechanically does not prove that risks are acceptable or controls are effective.
AI RMF 1.0 describes trustworthy-AI characteristics and organizes risk-management outcomes into four functions: Govern, Map, Measure, and Manage. Govern is cross-cutting; Map establishes context and risks; Measure assesses and tracks them; Manage prioritizes and treats them. The framework is supported by a playbook and can be adapted by organizations of different sizes and sectors.
Cybersecurity, Data Engineering
NIST — AI Risk Management Framework — https://www.nist.gov/itl/ai-risk-management-framework; NIST AI 100-1 — Artificial Intelligence Risk Management Framework (AI RMF 1.0) — https://nvlpubs.nist.gov/nistpubs/ai/nist.ai.100-1.pdf
