Skip to content
Store / NIST AI RMF / NIST AI RMF Checklist — The 4 Functions
NIST AI RMF US · Voluntary framework

NIST AI RMF Checklist — The 4 Functions

Practical checklist for Govern, Map, Measure and Manage — the reference AI governance framework in the US, increasingly required in contracts and RFPs even though it's voluntary.

Coming soon. This product is in preparation. Email us and we'll let you know as soon as it's ready to buy.
Also operating in the EU? You don't have to choose between this checklist and the AI Act one — they cover partly different risks, and many companies selling on both sides of the Atlantic need both. See also our NIST AI RMF vs AI Act comparison.
€29
VAT included · one-time payment
Notify me when it's ready → ← Back to store

What's included

  • Excel with the controls for the 4 functions (Govern, Map, Measure, Manage) and their categories
  • PDF interpretation guide by function
  • NIST AI RMF ↔ AI Act equivalence table, for companies that need both frameworks
  • Legal Notice

Why this document exists

The NIST AI RMF (AI Risk Management Framework) is voluntary — unlike the AI Act, it isn't law — but it has become the de facto vocabulary used by US federal agencies, large corporate buyers, and insurers to evaluate a vendor's AI governance maturity. More and more US RFPs and due diligence questionnaires are written directly in these terms (Govern, Map, Measure, Manage), and responding using European AI Act terminology creates unnecessary friction with a US buyer.

The 4 functions, in one line each

  • Govern: culture, policies, and organizational structure for AI risk management — the equivalent of your governance committee and roles.
  • Map: identify the context, use cases, and risks of each AI system before deploying it.
  • Measure: metrics and methods to assess, compare, and continuously monitor those risks.
  • Manage: prioritize and respond to identified risks, including response and recovery plans.

Frequently asked questions

Is the NIST AI RMF mandatory?

No, unlike the EU AI Act, the NIST AI RMF is voluntary — a reference framework, not a law. But more and more contracts, RFPs, and insurers in the US require it or use it as a vendor evaluation criterion.

Do I need this if I already have the AI Act checklist?

If you only operate in the EU, no. If you operate in the US or sell to US customers, yes — the NIST AI RMF uses a different structure and vocabulary, and many US buyers expect to see this specific terminology.

What format is it delivered in?

Excel with the controls for the 4 functions and a PDF guide, plus the Legal Notice, as an instant download after purchase.