NIST AI RMF

The NIST AI Risk Management Framework is a voluntary US framework for managing risks of AI systems across the lifecycle, organised around the functions Govern, Map, Measure, and Manage.

What is NIST AI RMF?

Published in January 2023, the NIST AI RMF is widely used by US enterprises and increasingly referenced internationally. It is technology-neutral and outcome-focused, emphasising trustworthy characteristics: valid and reliable, safe, secure and resilient, accountable and transparent, explainable and interpretable, privacy-enhanced, and fair with bias managed. The 2024 Generative AI Profile adds specific guidance for foundation models.

How does NIST AI RMF apply to enterprise AI?

Enterprises subject to US sectoral regulators (FDA, FTC, OCC) often map their controls to the NIST AI RMF. The framework also pairs cleanly with ISO 42001 and the EU AI Act for a single multi-jurisdiction control set.