NIST AI Risk Management Framework (AI RMF): the 4 functions in practice
The NIST AI Risk Management Framework (AI RMF) is a voluntary US framework for identifying and managing risk across the AI lifecycle. It is organized into four functions — Govern, Map, Measure and Manage — and is deliberately not a checklist: it describes outcomes to achieve rather than controls to install, which is its main strength and the reason teams find it hard to operationalize.
By Agent Trust Cloud · Last updated
The 4 functions
Govern is cross-cutting; the other three describe a cycle that repeats as systems and context change.
| Aspect | Purpose | Practical question | Evidence to keep |
|---|---|---|---|
| Govern | Establish accountability, roles, policy and risk culture. | Who owns the system and who can approve a change in its authority? | Named owners, policies, approvals and review records. |
| Map | Establish context, intended use, affected people and possible harms. | What can this system reach, change and affect? | Inventory, use case, dependencies, data classes and authority map. |
| Measure | Analyse, assess and track the risks identified during mapping. | How will the team detect risk before and during operation? | Evaluations, thresholds, telemetry and dated risk assessments. |
| Manage | Prioritise, respond to, monitor and recover from AI risks. | Which control prevents or contains an unacceptable action? | Control decisions, approvals, incidents, remediation and reassessment. |
- Govern — accountability, roles, policy and culture. The function everything else depends on, and the one that cuts across the other three.
- Map — establish context: what the system is for, who it affects, what could go wrong.
- Measure — analyse and track the risks you mapped, with methods appropriate to each.
- Manage — act on what you measured: prioritise, respond, monitor and recover.
Applying it to agents rather than models
The AI RMF was written with models in mind, and most published guidance reflects that: training data, evaluation, bias, explainability. An autonomous agent shifts the risk surface. The question is less "is the output accurate" and more "what did this software do, with whose authority, to which system".
Mapping an agent therefore means mapping its authority: which tools it can call, which data it can reach, which actions are irreversible, who it acts on behalf of, and what happens when it delegates to another agent. Measuring means instrumenting decisions, not only outputs. Managing means having a control that can actually stop an action.
Where teams get stuck
Two places, consistently. The first is Map: an inventory that lists applications rather than agents and their authority, which makes everything downstream approximate. The second is Measure: no telemetry at the decision point, so risk is assessed from documentation rather than from what the system actually did.
Both are inventory problems before they are framework problems. A function cannot be performed against systems nobody has enumerated.
How it relates to other frameworks
AI RMF is voluntary and US-originated. ISO/IEC 42001 provides a certifiable management system covering similar ground. The EU AI Act is law rather than guidance, with obligations by risk tier. Using AI RMF to structure the work does not discharge EU AI Act duties, and certifying to ISO/IEC 42001 does not by itself satisfy them either. The AI governance framework page compares the three side by side.
The free Excel template
The free Excel template below is a ten-question risk triage: it places an AI system in a risk tier and gives the next action. It is a starting point for the Map function, not a complete AI RMF workbook.
Free editable template
Triage an AI system in ten questions
Download the Excel risk triage, see its tier, and get the next action.
Get the free template →Common questions
- What is the NIST AI RMF?
- The NIST AI Risk Management Framework is a voluntary framework for managing risks in AI systems. AI RMF 1.0 was published by NIST in January 2023 as NIST AI 100-1.
- Is it mandatory?
- No. The NIST AI RMF is voluntary guidance, not a law or a certification. It is often used to structure an AI risk programme and is increasingly referenced in procurement and contracts.
Sources
- NIST AI Risk Management Framework (NIST AI 100-1) (primary source)