NIST AI RMF

The NIST AI Risk Management Framework (AI RMF) is the US voluntary framework for managing AI risk, organized around four core functions: Govern (policies and culture), Map (context and risk identification), Measure (analysis and assessment), and Manage (prioritization and treatment). It is the dominant enterprise AI governance reference in North America.

The AI RMF is vendor- and technology-neutral and integrates with existing enterprise risk management programs. Federal contractors and organizations seeking AI compliance in regulated sectors increasingly use AI RMF alignment as the baseline for internal governance programs, ahead of mandatory US AI legislation.