Framework library · United States

NIST AI RMF

NIST AI Risk Management Framework. Published by NIST, version 1.0 (+ GenAI Profile 600-1). Kapālins maps it at category level: the assessment’s 5 AI-risk areas, each tied to this framework, rather than clause by clause. 3 of 5 risk areas are proved by a live signal from the platform, and 2 by the assessment.

Read the source document

Risk areas mapped
LLM Security controlsAssessment
Agentic AI Risk controlsLive signal
AI Privacy & Data Governance controlsLive signal
Model Integrity & Supply Chain controlsAssessment
AI Governance & Risk Management controlsLive signal

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How the NIST AI RMF got here.

  1. Proposed

    NIST issued a Request for Information to inform development of the AI Risk Management Framework. NIST

  2. Proposed

    NIST released the initial draft of the AI Risk Management Framework for public comment. NIST

  3. Proposed

    NIST released the second draft of the AI Risk Management Framework. NIST

  4. Adopted

    NIST released AI Risk Management Framework 1.0 (NIST AI 100-1). NIST

  5. Guidance

    NIST released NIST AI 600-1, the Generative AI Profile of the AI RMF. NIST

  6. Proposed

    NIST released a concept note for an AI RMF Profile on Trustworthy AI in Critical Infrastructure. NIST

See this framework on your estateAll 29 frameworks