Skip to content
AI Governance in practice

NIST AI RMF

In a nutshell

The US standards institute's voluntary AI risk management framework, organised into four functions: Govern, Map, Measure and Manage.

The NIST AI Risk Management Framework (AI RMF 1.0) was published in January 2023 by NIST, the US standards institute. It is voluntary and has become an international reference for organising AI risk management.

It is built around four functions:

  • Govern: culture, policies, roles and responsibilities.
  • Map: understanding the context, uses and risks of each system.
  • Measure: assessing and tracking those risks with metrics.
  • Manage: prioritising and treating risks, and responding to incidents.

It does not replace the AI Act, but fits well with it: many companies use it as the backbone of their risk management system, especially if they also work with US clients.

Read more: ISO 42001 vs NIST AI RMF: which to choose.

Reference: NIST AI 100-1 (2023)

Related terms

Risk management system (AI)ISO/IEC 42001Algorithmic bias
What applies to you?

Take the free assessment and find out in a few minutes which obligations your company has and where to start.

Take the free assessment

← Back to the glossaryUpdated: October 2026 · Informational content, not legal advice.