The US National Institute of Standards and Technology's voluntary framework for managing risks associated with AI systems across the AI lifecycle, structured around the functions Govern, Map, Measure, and Manage.

ByCASRAI Editorial Board

· Last updated 21 May 2026

Examples

Worked examples

Is an instance
A US federal contractor mapping its AI portfolio to the AI RMF Map function.
Is an instance
An enterprise risk register structured around the AI RMF four functions.

Counter-examples

Looks similar, but isn't

Not an instance
A single technical evaluation suite.
Not an instance
An ISO 27001 information-security risk register.

Editorial commentary

NIST AI RMF 1.0 (2023) provides a process-oriented set of practices for identifying, assessing, and mitigating AI risks, with a separately published companion Playbook of concrete actions. A Generative AI Profile (NIST AI 600-1) addresses LLM-specific risks. The RMF is voluntary in the US but heavily referenced in US Executive Orders and federal procurement guidance.

References

NIST AI 100-1, 'Artificial Intelligence Risk Management Framework (AI RMF 1.0)' (2023); NIST AI 600-1 Generative AI Profile (2024).

Also known as

AI RMF · NIST AI Risk Management Framework

Machine-readable encodings

Use in your systems

JATS XML <role> element

xml

<role vocab="credit"
      vocab-identifier="https://casrai.org/dictionary/"
      vocab-term="NIST AI RMF (Risk Management Framework)"
      vocab-term-identifier="https://casrai.org/dictionary/term/nist-ai-rmf-risk-management-framework" />

Schema.org DefinedTerm (JSON-LD)

json

{
  "@context": "https://schema.org",
  "@type": "DefinedTerm",
  "@id": "https://casrai.org/dictionary/term/nist-ai-rmf-risk-management-framework",
  "name": "NIST AI RMF (Risk Management Framework)",
  "identifier": "https://casrai.org/dictionary/term/nist-ai-rmf-risk-management-framework",
  "description": "The US National Institute of Standards and Technology's voluntary framework for managing risks associated with AI systems across the AI lifecycle, structured around the functions Govern, Map, Measure, and Manage.",
  "inDefinedTermSet": "https://casrai.org/dictionary/domain/ai-ml-research-outputs#set",
  "url": "https://casrai.org/dictionary/term/nist-ai-rmf-risk-management-framework",
  "sameAs": [
    "AI RMF",
    "NIST AI Risk Management Framework"
  ],
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "publisher": {
    "@id": "https://casrai.org/#organization"
  },
  "dateModified": "2026-05-21T02:22:50",
  "inLanguage": "en"
}

Referenced across the research world

View CASRAI adoption →