What is the NIST AI Risk Management Framework (AI RMF)?
Short answer
The NIST AI RMF is voluntary guidance for managing risks from AI systems throughout their life cycle. It is organized into four functions, Govern, Map, Measure and Manage, and NIST also publishes a Generative AI Profile that applies it to generative AI risks.
The details
Because it is voluntary and flexible, small teams can adopt it gradually: start by listing the AI systems you use (Map), assign owners and policies (Govern), then decide how you will test and monitor them (Measure and Manage).
Useful next reads and tools
- GRC guides · guide
Terms explained
- NIST AI RMF
- The NIST AI Risk Management Framework is voluntary guidance for managing AI risks, organized into four functions: Govern, Map, Measure and Manage.
Sources
Related questions
Related Guides
GuideAI Security
10 LLM Security Risks Every Team Should Understand
Examine the top 10 LLM security risks affecting modern applications and learn concrete defensive controls to safeguard your data, models, and infrastructure.
Read more GuideAI Security
How to Deploy a Secure AI Chatbot for Small Business
Learn how to configure, test, and run a secure AI chatbot for your small business. Protect customer data, prevent prompt injection, and limit model access.
Read more GuideAI Security
9 Rules for Safe Use of Generative AI at Work
Discover nine practical rules for the safe use of generative AI at work. Protect company data, verify model outputs, and establish clear operational controls.
Read more GuideGRC
NIST AI RMF: Implementation Guide for Small Teams
Learn how small teams can implement the NIST AI RMF to assess risk, govern deployments, and deploy artificial intelligence safely without enterprise overhead.
Read more