Voluntary risk-management framework
NIST AI Risk Management Framework
The NIST AI Risk Management Framework (AI RMF 1.0) offers a process model—Govern, Map, Measure, Manage—to help organizations address AI risks. It is explicitly voluntary and not a U.S. federal regulation. Companion profiles, including for generative AI, tailor the framework to contexts. Organizations often use it alongside legal duties that come from other sources (sectoral law, contracts, or foreign regulation).
Last reviewed 2026-08-22
- Issuer
- NIST
- Year
- 2023
- Status
- Voluntary guidance
- Geographic scope
- United States origin; used internationally
- Intended audience
- Organizations designing, developing, deploying or using AI systems
- Official source
- Official text (opens in a new tab)
Main themes
- Governance
- Risk mapping
- Measurement
- Risk management
- Trustworthiness characteristics