{
  "notice": "Illustrative mapping from the AI Governance Engineer Body of Knowledge v0.5.0 (not a claim of conformity)",
  "version": "0.5.0",
  "license": "CC BY 4.0",
  "licenseUrl": "https://creativecommons.org/licenses/by/4.0/",
  "schemaVersion": 2,
  "schema": "https://aigovernanceengineer.com/api/v1/schemas/obligation.json",
  "self": "https://aigovernanceengineer.com/api/v1/obligations/aige-obl-nistrmf-govern.json",
  "source": "https://aigovernanceengineer.com/obligations/aige-obl-nistrmf-govern",
  "citation": {
    "title": "AI Governance Engineering: The Thesis & Body of Knowledge",
    "authors": [
      "Jorge García Aibar"
    ],
    "parentDoi": "https://doi.org/10.5281/zenodo.22956197",
    "conceptDoi": "https://doi.org/10.5281/zenodo.22857084"
  },
  "obligation": {
    "id": "AIGE-OBL-NISTRMF-GOVERN",
    "url": "https://aigovernanceengineer.com/obligations/aige-obl-nistrmf-govern",
    "json": "https://aigovernanceengineer.com/api/v1/obligations/aige-obl-nistrmf-govern.json",
    "framework": "NIST AI RMF",
    "frameworkId": "nist-ai-rmf",
    "clause": "GOVERN",
    "obligation": "GOVERN",
    "requirement": "A culture and structure for managing AI risk",
    "artefact": "Policy-as-code; operating model; registry ownership",
    "layers": [
      1,
      2
    ],
    "dutyHolder": null,
    "scope": null,
    "authority": null,
    "appliesFrom": null,
    "appliesStatus": "voluntary",
    "appliesNote": "Voluntary (AI RMF 1.0, January 2023)",
    "milestones": [],
    "systemClass": [],
    "patterns": [
      {
        "id": "pattern-policy-card",
        "title": "Policy Card",
        "url": "https://aigovernanceengineer.com/patterns/policy-card"
      },
      {
        "id": "pattern-continuous-assurance-telemetry",
        "title": "Continuous Assurance Telemetry",
        "url": "https://aigovernanceengineer.com/patterns/continuous-assurance-telemetry"
      },
      {
        "id": "pattern-framework-crosswalk",
        "title": "Framework Crosswalk",
        "url": "https://aigovernanceengineer.com/patterns/framework-crosswalk"
      },
      {
        "id": "pattern-machine-readable-evidence-oscal",
        "title": "Machine-Readable Evidence (OSCAL)",
        "url": "https://aigovernanceengineer.com/patterns/machine-readable-evidence-oscal"
      },
      {
        "id": "pattern-vendor--model-due-diligence-gate",
        "title": "Vendor / Model Due-Diligence Gate",
        "url": "https://aigovernanceengineer.com/patterns/vendor-model-due-diligence-gate"
      },
      {
        "id": "pattern-use-case-intake--risk-tiering",
        "title": "Use-Case Intake & Risk Tiering",
        "url": "https://aigovernanceengineer.com/patterns/use-case-intake-risk-tiering"
      },
      {
        "id": "pattern-training-data-rights-ledger",
        "title": "Training-Data Rights Ledger",
        "url": "https://aigovernanceengineer.com/patterns/training-data-rights-ledger"
      },
      {
        "id": "pattern-model-artefact-integrity",
        "title": "Model Artefact Integrity",
        "url": "https://aigovernanceengineer.com/patterns/model-artefact-integrity"
      },
      {
        "id": "pattern-rights-requests-against-models",
        "title": "Rights Requests Against Models",
        "url": "https://aigovernanceengineer.com/patterns/rights-requests-against-models"
      },
      {
        "id": "pattern-sanctioned-ai-gateway",
        "title": "Sanctioned AI Gateway",
        "url": "https://aigovernanceengineer.com/patterns/sanctioned-ai-gateway"
      },
      {
        "id": "pattern-disclosure--notification-pipeline",
        "title": "Disclosure & Notification Pipeline",
        "url": "https://aigovernanceengineer.com/patterns/disclosure-notification-pipeline"
      },
      {
        "id": "pattern-deactivation-localisation--retirement-runbook",
        "title": "Deactivation, Localisation & Retirement Runbook",
        "url": "https://aigovernanceengineer.com/patterns/deactivation-localisation-retirement-runbook"
      }
    ],
    "crosswalkTopics": [
      "governance-accountability",
      "inventory-registration",
      "human-oversight",
      "supply-chain",
      "risk-management",
      "incident-monitoring",
      "prohibited-practices",
      "fairness-non-discrimination",
      "ai-literacy",
      "ip-copyright",
      "agent-identity-autonomy",
      "deployment-change-decommissioning"
    ],
    "reviewed": "2026-09-19",
    "chapter": "https://aigovernanceengineer.com/bok/regulatory-map#nist-ai-rmf"
  }
}