Function: MANAGE
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
Operational function: prioritising, treating and monitoring AI risks, including incident response and third-party risk.
What this connects to
15 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Cited by1
- External frameworkNote: NIST AI 600-1 Generative AI Profile (July 2024)Guidance
GenAI Profile maps suggested actions to MANAGE subcategories
Mapped across from14
- SectionArea 3: Operations ManagementGuidanceGAGE analysis, not official
Operations management corresponds to MANAGE risk treatment and monitoring
- InstrumentModel AI Governance Framework for Agentic AIGuidanceGAGE analysis, not official
Lifecycle technical controls for agents correspond to MANAGE risk treatment
- InstrumentCSA Guidelines and Companion Guide on Securing AI SystemsGuidanceGAGE analysis, not official
CSA lifecycle security controls correspond to MANAGE risk treatment
- ObligationEstablish a vulnerability disclosure processGuidanceGAGE analysis, not official
Vulnerability disclosure processes belong to MANAGE incident and third-party risk
- External frameworkArticle 9: Risk management systemBindingGAGE analysis, not official
Risk treatment corresponds to the MANAGE function
- External frameworkArticle 15: Accuracy, robustness and cybersecurityBindingGAGE analysis, not official
Robustness/cybersecurity treatments belong to MANAGE
- External frameworkArticle 26: Obligations of deployersBindingGAGE analysis, not official
Deployer monitoring duties correspond to MANAGE operations
- External frameworkClause 8: OperationStandardGAGE analysis, not official
AIMS operation corresponds to MANAGE risk treatment
- External frameworkClause 10: ImprovementStandardGAGE analysis, not official
Continual improvement corresponds to MANAGE adaptation
- SectionPrinciple 3: Security and SafetyGuidanceGAGE analysis, not official
Security and safety treatments belong to MANAGE
- SectionStage 2: DevelopmentGuidanceGAGE analysis, not official
Development-stage supply chain and asset protection are MANAGE treatments
- SectionStage 5: End of LifeGuidanceGAGE analysis, not official
Secure disposal is a MANAGE lifecycle treatment
- SectionAgentic controls: DevelopmentGuidanceGAGE analysis, not official
Agentic supply-chain controls are MANAGE treatments
- InstrumentMindForge AI Risk Management Toolkit (Project MindForge phase 2)GuidanceGAGE analysis, not official
Toolkit use supports MANAGE-stage risk treatment decisions for FIs
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.