MarketplaceAINIST AI RMF
AIFramework

NIST AI RMF

NIST AI Risk Management Framework

The AI Risk Management Framework (AI RMF) is a voluntary framework developed by NIST to help organizations design, develop, use, and evaluate AI systems with trustworthiness considerations. It addresses governance, mapping, measuring, and managing AI risks.

Overview

The AI RMF is intended to improve the integration of trustworthiness into the lifecycle of AI systems. Developed through collaboration with over 240 organizations across private industry, academia, and government, the framework includes guidelines for understanding AI risks, ensuring trustworthiness, and implementing effective risk management practices. It is structured around four core functions—Govern, Map, Measure, and Manage—with use-case profiles customizable to specific applications and settings. Appendices provide in-depth details like how AI risks differ from traditional software risks and tasks performed by AI actors. The AI RMF aims to create effective risk dialogues and guidelines for trustworthy AI.

Related in AI

AIFramework

AICM v1.1 — AI Controls Matrix v1.1

The AI Controls Matrix v1.1 (AICM) is a vendor-agnostic framework for securing cloud-based AI systems. It consists of 247 control objectives across 18 security domains, mapping to standards like ISO 27001 and ISO 42001.

Cloud Security Alliance (CSA) • Global • v1.1

View details
AIGuideline

AI-CAIQ — AI Consensus Assessments Initiative Questionnaire (AI-CAIQ)

The AI-CAIQ is a structured framework from the Cloud Security Alliance designed to help organizations self-assess compliance with AI-specific security, governance, privacy, and resilience controls. It builds on the widely adopted CAIQ for cloud security.

Cloud Security Alliance • Global • v1.1.0

View details
AIStandard

ISO/IEC 42001 — ISO/IEC 42001:2023 - Artificial Intelligence Management System

ISO/IEC 42001:2023 is the first international standard for Artificial Intelligence Management Systems (AIMS). It provides requirements for establishing, implementing, maintaining, and improving AIMS, focusing on the responsible use, governance, and risk management of AI across organizations.

ISO/IEC • v2023

View details
AIRegulation

EU AI Act — EU Artificial Intelligence Act

The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive law regulating artificial intelligence. It establishes a risk-based framework that classifies AI systems into four categories—unacceptable, high-risk, limited-risk, and minimal-risk—with stricter obligations applied to higher-risk systems.

European Union • EU • vJanuary 2024

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call