NIST AI Risk Management Framework

AI RMF Profile on Trustworthy AI in Critical Infrastructure Concept Note

NIST Information Technology Laboratory announced the launch of a new AI RMF Trustworthy AI in Critical Infrastructure Profile project in April 2026. The profile will guide critical infrastructure operators toward specific risk management practices when deploying AI-enabled capabilities, and help communicate trustworthiness requirements across AI and CI lifecycles and supply chains. NIST is creating a Community of Interest to gather feedback from industry, regulators, policymakers, academia, and other stakeholders on the profile development.

ITL AI Engagement and Updates: NIST AI Risk Management Framework

NIST's Information Technology Laboratory (ITL) AI Program provides an informational hub for engagement with its AI Risk Management Framework (AI RMF). The page lists upcoming events including an April 2026 ITL AI Webinar Series on Building Traceability into Agentic AI Ecosystems Through Measurement Probes, recent workshops such as The International AI Standards Landscape (March 2026), and past events dating back to 2020. The ITL AI Program organizes workshops bringing together government, industry, academia, and other stakeholders from the US and around the world to advance AI standards, guidelines, and related tools. Ways to engage include the NIST AI Consortium, Requests for Information, draft report reviews, and student programs.

Artificial Intelligence Risk Management Framework (AI RMF 1.0)

NIST has published the AI Risk Management Framework (AI RMF 1.0), NIST AI 100-1, a comprehensive voluntary framework for managing risks throughout the AI system lifecycle. The framework organizes AI risk management activities into four core functions: Govern, Map, Measure, and Manage, with Governance as a cross-cutting function. It defines seven characteristics of trustworthy AI: valid and reliable, safe, secure and resilient, accountable and transparent, explainable and interpretable, privacy-enhanced, and fair with harmful bias managed. The framework will be reviewed no later than 2028.

NIST AI Risk Management Framework Playbook

NIST has published the AI Risk Management Framework Playbook as a companion resource to the AI RMF Core (Tables 1–4 in AI RMF 1.0). The Playbook provides suggested actions organized under the four AI RMF functions—Govern, Map, Measure, and Manage—and is explicitly voluntary, allowing organizations to adopt as many or as few suggestions as apply to their use case. The resource is described as a living document that will evolve approximately twice per year as AI technology advances, with community feedback encouraged via AIframework@nist.gov.

NIST Seeks Comments on AI Risk Management Framework Draft 2 and Playbook

NIST released Draft 2 of its voluntary Artificial Intelligence Risk Management Framework (AI RMF) for public comment, along with a companion Draft AI RMF Playbook. The draft Playbook provides recommended actions for implementing the Govern and Map functions of the Framework. Comments on both documents are due by September 29, 2022. NIST plans to publish AI RMF 1.0 in January 2023.

NIST AI Risk Management Framework 1.0 Released

The National Institute of Standards and Technology (NIST) has released version 1.0 of its Artificial Intelligence Risk Management Framework (AI RMF). This voluntary guidance document aims to help organizations manage risks associated with AI technologies and promote trustworthiness in AI systems.

NIST AI Risk Management Framework: Generative AI Profile

NIST has released the AI Risk Management Framework (AI RMF) Generative Artificial Intelligence (GAI) Profile. This guidance document provides a cross-sectoral profile and companion resource for the AI RMF 1.0, specifically addressing risks unique to or exacerbated by GAI and suggesting actions to manage these risks.