The NIST AI RMF is a free, voluntary framework from the US National Institute of Standards and Technology (NIST). It helps organizations manage the risks AI can pose to people, to organizations and to society. NIST released version 1.0 on January 26, 2023. The framework is built around four functions: Govern, Map, Measure and Manage. You can think of it like a home safety checklist. Nobody makes you use it, but it walks you through who is in charge, what could go wrong, how to check, and what to do about it.
In July 2024, NIST added a Generative AI Profile (NIST-AI-600-1) for AI tools that produce text, images and other content. NIST says the framework is being revised.
Why it matters
You do not need to adopt the whole framework to get value from it. Its four functions give a small organization a clear way to shape its own AI governance and to run an AI risk assessment before rolling out a new tool. When a vendor offers you an AI product, ask whether they follow the NIST AI RMF or a similar standard such as ISO 42001, and ask them to show you how. A vague answer is a warning sign. For a fuller walk-through, see our guide to AI governance frameworks.
Published Updated
Sources
- NIST AI Risk Management Framework, checked October 27, 2026