Organizational risk tolerances are determined and documented.
Summary
Organizational risk tolerances are determined and documented.
Read the full official text: https://airc.nist.gov/airmf-resources/playbook/
โ Subcategory 1.5
Ongoing monitoring and periodic review of the risk management process and its outcomes are planned, organizational roles and responsibilities are clearly defined, including determining the frequency of periodic review.
Subcategory 1.6 โ
Mechanisms are in place to inventory AI systems and are resourced according to organizational risk priorities.
Track NIST AI RMF subcategory 1.5 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial