Audit glossary

NIST AI Risk Management Framework

A voluntary US framework with four functions: Govern, Map, Measure, Manage.

AAIA

Published by NIST in January 2023, the AI RMF helps organisations manage AI risks. Govern sets culture and accountability; Map establishes context and identifies risks; Measure analyses and tracks them; Manage prioritises and acts on them.

On the exam

Know the four functions. “Deploy” or “Monitor” as a fifth function is a distractor.

Related terms

  • ISO/IEC 42001The international standard for an AI management system.
  • EU AI ActThe EU’s risk-based law on AI, in force since August 2024 and applied in phases.
  • AI governanceThe policies, roles and oversight that keep AI use accountable.

Test yourself with today’s question of the day.