NIST AI RMF

Also called AI Risk Management Framework

The US National Institute of Standards and Technology's voluntary framework for managing AI risk, built on four functions: Govern, Map, Measure and Manage.

Definition

NIST released version 1.0 of the AI Risk Management Framework in January 2023. Govern sets the culture, roles and policies; Map establishes the context and risks of a system; Measure assesses and tracks those risks; Manage prioritises and acts on them.

In July 2024 NIST added a Generative AI Profile (NIST AI 600-1) listing risks specific to generative AI, such as confabulation, data privacy and information integrity, with suggested actions. The framework is voluntary but widely used as a common language for AI risk, including outside the US.

Sources

  1. NIST, AI Risk Management Framework
  2. NIST AI 600-1, Generative AI Profile (July 2024)