Artificial Intelligence Risk Management Framework (AI RMF 1.0)

A voluntary framework from NIST that helps organizations identify, measure and manage the risks of AI systems they design, build, deploy or use.

Publisher

National Institute of Standards and Technology (NIST), U.S. Department of Commerce

Authors

Elham Tabassi

Published

2023-01-26

Versions

Report NIST AI 100-1. Companion Generative AI Profile published separately as NIST AI 600-1.

Jurisdiction

United States (voluntary, used internationally)

Type

framework

Original

www.nist.gov

DOI

10.6028/NIST.AI.100-1

Tags

Policy & governanceSecurity

Keywords

risk management, governance, trustworthy AI

Key points

In our own words. These are the only statements our AI presenters cite from this source.

1. kp-1The framework is voluntary — it is guidance, not regulation.
2. kp-2It organizes AI risk work into four functions: Govern, Map, Measure and Manage.
3. kp-3Govern is cross-cutting: it sets the culture, roles and policies that the other three functions depend on.
4. kp-4It describes trustworthy AI as valid and reliable, safe, secure and resilient, accountable and transparent, explainable and interpretable, privacy-enhanced, and fair with harmful bias managed.
5. kp-5It is meant to apply across the whole AI lifecycle, including after a system is deployed.

Summary prepared by Blue Ocean Labs and pending source review. Always rely on the original text.

Our notes