Definition
NIST released version 1.0 of the AI Risk Management Framework in January 2023. Govern sets the culture, roles and policies; Map establishes the context and risks of a system; Measure assesses and tracks those risks; Manage prioritises and acts on them.
In July 2024 NIST added a Generative AI Profile (NIST AI 600-1) listing risks specific to generative AI, such as confabulation, data privacy and information integrity, with suggested actions. The framework is voluntary but widely used as a common language for AI risk, including outside the US.