NIST AI Risk Management Framework (AI RMF 1.0)

NIST AI 100-1

This repository contains the full text of the NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0), organized by chapter and section for easy navigation.

This publication is available free of charge from: https://doi.org/10.6028/NIST.AI.100-1

January 2023 | U.S. Department of Commerce | National Institute of Standards and Technology

Table of Contents

Executive Summary

Part 1: Foundational Information

• 1. Framing Risk
  • 1.1 Understanding and Addressing Risks, Impacts, and Harms
  • 1.2 Challenges for AI Risk Management
    • 1.2.1 Risk Measurement
    • 1.2.2 Risk Tolerance
    • 1.2.3 Risk Prioritization
    • 1.2.4 Organizational Integration and Management of Risk
• 2. Audience
• 3. AI Risks and Trustworthiness
  • 3.1 Valid and Reliable
  • 3.2 Safe
  • 3.3 Secure and Resilient
  • 3.4 Accountable and Transparent
  • 3.5 Explainable and Interpretable
  • 3.6 Privacy-Enhanced
  • 3.7 Fair - with Harmful Bias Managed
• 4. Effectiveness of the AI RMF

Part 2: Core and Profiles

• 5. AI RMF Core
  • 5.1 Govern
  • 5.2 Map
  • 5.3 Measure
  • 5.4 Manage
• 6. AI RMF Profiles

Appendices

• Appendix A: Descriptions of AI Actor Tasks
• Appendix B: How AI Risks Differ from Traditional Software Risks
• Appendix C: AI Risk Management and Human-AI Interaction
• Appendix D: Attributes of the AI RMF

About

The AI RMF was developed by NIST in collaboration with the private and public sectors, as directed by the National Artificial Intelligence Initiative Act of 2020 (P.L. 116-283). It is intended to be voluntary, rights-preserving, non-sector-specific, and use-case agnostic.

For more information, visit the NIST AI RMF website.