SECAI Core · phase 8 of 15
NIST AI Risk Management Framework (AI RMF)
A voluntary, structured guideline created to help organizations understand, evaluate, and manage risks associated with artificial intelligence systems
The Explain card
- Plain English
- The NIST AI RMF is a voluntary, structured guideline that helps organisations understand, evaluate and manage the risks that come with AI systems.
- Example
- A healthcare provider adopting a diagnostic model uses the framework's core functions (Govern, Map, Measure, Manage) to assign accountability, map where the model could cause harm, measure its accuracy and bias, and put mitigations and monitoring in place before go-live.
- Why it matters
- It gives defenders a common vocabulary and a repeatable process for AI risk, which makes it easier to justify controls, compare systems, and show regulators a recognised approach.
- Hook
- Govern, Map, Measure, Manage: the four verbs of AI risk.
Where it sits in the deck
Phase 8: Governance, Risk, and Compliance Frameworks
Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.
