NIST AI RMF

NIST AI RMF Practitioner

Name: eurocompliant.com AI Compliance Copilot
Price: 299 EUR
Author: eurocompliant.com

Applying the Govern-Map-Measure-Manage functions in practice, including the AI RMF Playbook's practical suggestions.

13 questions · 75% to pass · free

eurocompliant.com is not an accredited certification body. This is a self-paced educational assessment; the certificate confirms completion only, not a professional, statutory, or accredited qualification.

Your details

Name *

Email *

We'll email your certificate here if you pass. We may occasionally follow up about eurocompliant.com - you can unsubscribe any time.

Question 1 of 13

Which of the following are among the trustworthy AI characteristics the NIST AI RMF asks organisations to consider when mapping and measuring risk?

Select all that apply.

Explainability and interpretabilityThe AI system's marketing budgetPrivacy-enhanced designFairness with harmful bias managed

Question 2 of 13

Under the Map function, what does 'establishing context' typically involve?

Understanding the AI system's intended purpose, deployment context, and potential positive and negative impacts on individuals, groups, and societyOnly mapping the technical architecture, never the deployment contextIgnoring the AI system's intended purposeContext establishment only applies to government-deployed systems

Question 3 of 13

What role do 'impact assessments' play in the Map function's practical application?

They replace the need for any risk measurementNo role — impact assessments are not part of the RMFThey are only relevant to financial impact, never societalThey help identify and characterise potential impacts of the AI system on individuals, groups, communities, and society

Question 4 of 13

Under the Measure function, why does the framework emphasise both quantitative and qualitative methods?

Because some AI risks (e.g. certain fairness or societal impact considerations) may be difficult to capture through quantitative metrics alone, requiring complementary qualitative approachesBecause quantitative methods alone are always sufficientThe framework only permits quantitative methods for regulatory reasonsQualitative methods are explicitly discouraged by the framework

Question 5 of 13

What is the purpose of the NIST AI RMF Playbook that accompanies the core framework?

It provides suggested actions, references, and practical guidance for implementing the Govern, Map, Measure, and Manage functionsIt is a legal document imposing binding obligationsIt has no defined purposeIt replaces the four core functions with a different structure

Question 6 of 13

Under the Manage function, what does 'risk response' typically include?

Only accepting all risk with no other option availableRisk response is not addressed by the Manage functionOptions such as mitigating, transferring, avoiding, or accepting risk, informed by the organisation's risk toleranceIgnoring identified risks until they cause harm

Question 7 of 13

The NIST AI RMF is intended to be applicable across the AI lifecycle — from design and development through deployment and use — rather than only at a single stage.

TrueFalse

Question 8 of 13

How does the Govern function support the other three functions (Map, Measure, Manage)?

It has no relationship to the other functionsGovern only applies after Map, Measure, and Manage are completeGovern is optional and can be skipped without affecting the other functionsGovern is cross-cutting and informs how Map, Measure, and Manage activities are carried out, through policies, culture, and accountability structures

Question 9 of 13

Why might an organisation use the NIST AI RMF alongside a certifiable standard like ISO/IEC 42001?

The two cannot be used together under any circumstancesThere is no benefit to combining voluntary guidance with a certifiable standardThe NIST AI RMF's function-based structure and Playbook can provide practical, detailed guidance that complements the formal management system requirements of ISO/IEC 42001NIST AI RMF adoption automatically confers ISO/IEC 42001 certification

Question 10 of 13

Which of the following are examples of 'negative impacts' the Map function encourages organisations to consider for an AI system?

Select all that apply.

The AI system's server hosting costsHarm to an organisation's reputationHarm to individuals' civil liberties or rightsHarm to broader societal or ecological systems

Question 11 of 13

Under the NIST AI RMF, risk tolerance and prioritisation decisions are expected to be informed by organisational context and are not prescribed as a single fixed standard for all organisations.

TrueFalse

Question 12 of 13

What is a practical benefit of documenting AI system risk decisions made under the Manage function?

Documentation is discouraged by the framework to reduce liability exposureThere is no benefit to documentationOnly external parties may document Manage-function decisionsIt supports accountability, traceability, and the ability to review and improve risk management practices over time

Question 13 of 13

How does the NIST AI RMF suggest organisations handle AI risks that are identified but not fully resolved before deployment?

Residual risk is not a concept addressed by the frameworkOnly regulators can decide whether residual risk is acceptableDeployment must always be halted indefinitely until zero risk remainsResidual risk should be understood, and risk response decisions (e.g. accepting, mitigating further, or delaying deployment) should be made deliberately and documented, consistent with organisational risk tolerance

0 of 13 answered