Skip to main content
Oximy

NIST AI Risk Management Framework

A voluntary framework from NIST providing guidance for organizations to manage risks associated with AI systems throughout their lifecycle.

Also known asAI RMFNIST AI Framework
Full Definition

What is the NIST AI RMF?

The NIST AI Risk Management Framework (AI RMF) is a voluntary guidance document published by the National Institute of Standards and Technology to help organizations design, develop, deploy, and use AI systems responsibly. Released in January 2023, it provides a structured approach to managing AI risks.

Core Functions

GOVERN Cultivate a culture of risk management:

  • Policies and procedures
  • Roles and responsibilities
  • Organizational commitment
  • Third-party considerations

MAP Understand context and identify risks:

  • AI system categorization
  • Impact assessment
  • Stakeholder identification
  • Risk identification

MEASURE Assess and analyze AI risks:

  • Appropriate metrics
  • Testing and evaluation
  • Bias assessment
  • Ongoing monitoring

MANAGE Prioritize and act on risks:

  • Risk treatment options
  • Residual risk acceptance
  • Documentation
  • Continuous improvement

Key Characteristics

Trustworthy AI Attributes

  • Valid and reliable
  • Safe
  • Secure and resilient
  • Accountable and transparent
  • Explainable and interpretable
  • Privacy-enhanced
  • Fair with harmful bias managed

Adoption Benefits

  • Structured risk approach
  • Alignment with emerging regulations
  • Stakeholder confidence
  • Improved AI outcomes
  • Integration with existing frameworks