United States
NIST AI RMF
The NIST AI Risk Management Framework is a voluntary US framework for managing risks from AI systems. It is organised around four functions, Govern, Map, Measure, and Manage, to help organisations build trustworthy and responsible AI.
13 subcategorys
Legal and regulatory requirements
Legal and regulatory requirements related to AI risk management are understood, managed, and adhered to.
Intended purpose and context
Intended purposes, context of use, and potential impacts of AI systems are identified and documented.
Risk measurement approaches
AI risks are measured using approaches that are appropriate to the context and aligned with organisational risk tolerance.
Risk response planning
Plans and processes are established to respond to and recover from identified AI risks.
AI system documentation
AI systems and their risks are documented for transparency and accountability.
AI risk management integration
AI risk management processes are integrated with broader enterprise risk management.
AI system impact on individuals and groups
Potential impacts of the AI system on individuals and groups are identified, with emphasis on historically marginalised communities.
AI system performance and reliability
AI system performance and reliability are measured in context, including for known failure modes.
AI risk management practices implementation
AI risk management practices are implemented and managed, with monitoring of effectiveness and ongoing risk management.
AI risk management transparency
Information about AI risk management practices is shared with appropriate stakeholders.
Roles, responsibilities, and accountability
Roles, responsibilities, accountability, and procedures for managing AI risk are defined and communicated.
AI risk prioritisation
Identified AI risks are prioritised based on severity, likelihood, and organisational risk tolerance.
Post-deployment monitoring and response
AI systems are monitored post-deployment for risks, with processes to respond to emerging risks.
Turn NIST AI RMF into tracked tasks
eurocompliant maps these obligations to checklists and evidence, so you can prove compliance instead of re-reading the text.
Start free trial