4 functions
The four functions of the NIST AI RMF
GOVERN builds the policies, people and culture; MAP sets the context; MEASURE tests against the risks; MANAGE acts on what was found. Each page below prints one function whole, verified against NIST AI 100-1 on August 25, 2026.
- 6 categories, 19 subcategoriesGOVERNThe people, policies and culture that make the other three functions possible.
- 5 categories, 18 subcategoriesMAPEstablish the context: what the system is for, who it touches, and what could go wrong.
- 4 categories, 22 subcategoriesMEASURETest the system against the risks MAP found, with methods you can defend.
- 4 categories, 13 subcategoriesMANAGEAct on what was mapped and measured: prioritize, respond, recover, communicate.
Know the framework. Then prove you can run it.
A function is a checklist until you have run it for a real organization. The AI Governance program drills the calls themselves, and the credential shows an employer you made them under assessment.