NIST AI Risk Management Framework 1.0
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
Published 26 January 2023 and voluntary by design. It carries weight anyway: state statutes, contracts and insurers cite it, which is how a voluntary framework becomes an obligation without ever being enacted. NIST states it is being revised under the AI Action Plan.
From the source
“The AI RMF 1.0 is being revised as part of the White House AI Action Plan.”
NIST AI RMF programme page
Instrument record
- Short name
- AI RMF 1.0
- Date
- 2023-01-26
- Version
- 1.0
- Cluster
- core
On the timeline
- 2023-01-26NIST publishes the AI Risk Management Framework 1.0
What this connects to
8 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Contains6
- SectionGovern: an AI RMF core functionGuidance
- SectionMap: an AI RMF core functionGuidance
- SectionMeasure: an AI RMF core functionGuidance
- SectionManage: an AI RMF core functionGuidance
- InstrumentNIST AI 600-1: Generative AI ProfileGuidance
- InstrumentAI RMF Profile for Trustworthy AI in Critical Infrastructure (concept note)Consultation
Maps across to1
- InstrumentModel AI Governance Framework, 2nd Edition (2020)GuidanceSingaporeGAGE analysis, not official
Both are the voluntary national AI governance framework of their jurisdiction: neither is law, both are what a regulator or a contract will point at
Verified against the official source on 2026-08-18. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.