What is the NIST AI Risk Management Framework?

The NIST AI Risk Management Framework (AI RMF 1.0) is a voluntary US framework for managing the risks of AI. It is organised into four functions: Govern (policies, roles and culture), Map (context and risks), Measure (testing and tracking) and Manage (prioritising and acting on risks). It is widely used as a common language for AI governance, including outside the US.

How it works

1. Govern: set policy, name accountable owners and set up oversight.
2. Map: document each AI system's context, purpose and risks.
3. Measure: test performance, bias and robustness, and track them over time.
4. Manage: act on what you find, and keep records of it.