NIST AI Risk Management Framework (AI RMF)

A voluntary framework (NIST AI 100-1, 2023) organized around four functions, Govern, Map, Measure, and Manage, that guide organizations in identifying and managing AI risk. Its Govern function calls for documented accountability structures and traceability across an AI system's lifecycle, directly relevant to the agent trail this topic builds.

A voluntary framework (NIST, 2023) organizing AI risk into four functions, Govern, Map, Measure, and Manage. Its Measure function maps to monitoring and its Manage function to incident response and recovery, making it the standards backbone under this topic. Complemented by the certifiable ISO/IEC 42001:2023 AI management-system standard.

A voluntary US framework, version 1.0 published by NIST in January 2023, structured around four functions (Govern, Map, Measure, Manage), with a 2024 Generative AI Profile (AI 600-1) that identifies risk categories closely comparable to those addressed in China's and the EU's binding requirements, despite carrying no legal mandate itself.

The US National Institute of Standards and Technology's voluntary framework (2023, with a Generative AI Profile added July 2024) built on four functions, Govern, Map, Measure, and Manage, that structure how organizations identify, assess, and respond to AI risk across the lifecycle.

The US framework (NIST AI RMF 1.0, 2023) organized around four functions, govern, map, measure, and manage, that map onto the inventory, validation, monitoring, and governance of an audit-ready program.