Governance & Regulation intermediate

NIST AI Risk Management Framework

Also called: AI RMF, NIST AI RMF

A voluntary US framework for managing AI risk, organised around Govern, Map, Measure, Manage.

Published by NIST in January 2023, the AI RMF is guidance rather than law, and it is sector-agnostic. Its four functions give teams a structure for identifying context, measuring risk, and acting on it. It has become the de facto reference for AI governance programmes, including at companies with no US obligations, because it is practical and free.

In practice: Using Govern-Map-Measure-Manage as the skeleton of an internal AI policy.