Glossary term
Glossary term
Governance and Compliance
A voluntary framework for managing AI risks to individuals, organizations, and society. Its core functions are Govern, Map, Measure, and Manage. The Govern, Map, Measure, and Manage functions are useful as a lifecycle risk lens and can complement ISO 42001's management-system structure.
NIST AI RMF 1.0 was published on 26 January 2023 by the US National Institute of Standards and Technology, organized around the four functions Govern, Map, Measure, and Manage.
NIST AI 600-1 GenAI Profile (July 2024) extends the AI RMF to generative AI with 12 risk categories including confabulation, dangerous content, and prompt injection.
NIST published an ISO/IEC 23894 to AI RMF Crosswalk and an ISO/IEC 42005 to AI RMF Crosswalk in 2025 to support harmonized implementation.