evident
Book a demo
Glossary

NIST AI RMF (AI Risk Management Framework)

The NIST AI Risk Management Framework is a voluntary, non-certifiable US framework providing guidance for organizations to identify, measure, and manage risks from artificial intelligence systems.

Nate LeeCo-Founder, CEOPublished

NIST AI RMF (AI Risk Management Framework) is a voluntary framework published by the US National Institute of Standards and Technology to help organizations manage risks arising from AI systems.

The framework covers:

  • Risk identification: Understanding where AI systems introduce risks to operations, users, and stakeholders
  • Risk measurement: Assessing the severity and likelihood of AI-related harms
  • Risk management: Implementing controls and safeguards to reduce identified risks
  • Continuous monitoring: Tracking AI system behavior and effectiveness of mitigations

Unlike ISO 27001 or ISO 42001, the NIST AI RMF is not certifiable; it is guidance. Organizations use it to build internal AI governance and assurance processes as AI adoption accelerates.