NIST AI Risk Management Framework

Not legal advice. The NIST AI RMF is a voluntary framework, not a law. This page summarizes NIST’s own documents as checked on October 17, 2026. Verified Oct 2026.

What it is

The AI Risk Management Framework (AI RMF 1.0, NIST AI 100-1) is published by the National Institute of Standards and Technology. NIST says the framework “is intended to be voluntary, rights-preserving, non-sector-specific, and use-case agnostic.” It organizes AI risk work into four functions: govern, map, measure, and manage. Its list of trustworthy-AI traits includes “secure and resilient,” next to valid and reliable, safe, accountable and transparent, explainable and interpretable, privacy-enhanced, and fair.

NIST has added companion documents. The Generative AI Profile (NIST AI 600-1) covers risks specific to generative AI, and NIST also publishes a Playbook of suggested actions. The Cyber AI Profile (NIST IR 8596), published as an initial preliminary draft, is a Cybersecurity Framework profile for AI.

Who it applies to

No organization is required to use it. NIST says it gives flexibility “to organizations of all sizes and in all sectors” to apply its approaches. Our interpretation: it is most useful as a shared vocabulary for legal, data science, and security teams.

Key dates

• January 26, 2023: AI RMF 1.0 released (NIST news item; the document is dated January 2023).
• July 26, 2024: Generative AI Profile (NIST AI 600-1) released.
• December 16, 2025: Cyber AI Profile (NIST IR 8596) initial preliminary draft published. Comments closed January 30, 2026.
• April 7, 2026: NIST released a concept note for an AI RMF profile on trustworthy AI in critical infrastructure.
• Revision under way: NIST’s framework page says AI RMF 1.0 “is being revised as part of the White House AI Action Plan.” NIST gives no date for the revised version.

What security teams should do

These are our suggestions, not NIST requirements.

• Use the four functions to organize AI risk work. Put ownership under govern, the AI system inventory and context under map, testing (including adversarial and misuse testing) under measure, and controls and incident response under manage.
• Feed AI risks into the existing risk register. Track them there rather than in a separate list, so they get the same review and reporting.
• Use the Generative AI Profile for generative systems. It lists risks specific to generative AI and suggested actions.
• Watch the Cyber AI Profile and the AI RMF revision. Both may change the mapping between AI risk and existing security controls. Plan to re-check this page when NIST publishes them.

This page is general information, not legal advice. Verified Oct 2026 against NIST’s framework page and publications.