AI Governance Engineer
GitHub

NIST AI RMF

By Updated

The NIST Artificial Intelligence Risk Management Framework 1.0 (NIST AI 100-1, January 2023): voluntary guidance organised as a Core of four functions (Govern, Map, Measure, Manage) with categories and subcategories, plus profiles and a companion Playbook 12.

Developed in
ch. 22, NIST AI RMF 1.0 in depth
ch. 08, NIST AI RMF
Chapters
ch. 08, Regulatory Map · ch. 22, Principles & Standards
Compared side by side
NIST AI RMF vs ISO 42001 · NIST AI RMF vs EU AI Act
Source
2 numbered references, listed below

Where it is used

21 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

NIST AI RMF: mentions per chapter193 mentions of the term across 21 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter00 Preface: 4 mentions00 Preface401 Definition: 2 mentions01 Definition202 Why Now: 4 mentions02 Why Now403 Values & Principles: 4 mentions03 Values & Principles404 The Stack: 14 mentions04 The Stack1405 Patterns: 4 mentions05 Patterns406 The Role: 8 mentions06 The Role807 Maturity Model: 2 mentions07 Maturity Model208 Regulatory Map: 19 mentions08 Regulatory Map1910 Reading List: 12 mentions10 Reading List1211 AI Defined: 2 mentions11 AI Defined212 Governance Program: 14 mentions12 Governance Program1413 Risk Management: 22 mentions13 Risk Management2214 Development: 12 mentions14 Development1215 Deployment: 14 mentions15 Deployment1416 Fairness & XAI: 4 mentions16 Fairness & XAI417 Incidents: 6 mentions17 Incidents618 EU AI Act: 2 mentions18 EU AI Act219 Privacy & AI: 18 mentions19 Privacy & AI1822 Principles & Standards: 22 mentions22 Principles & Standards2223 AI Agents: 4 mentions23 AI Agents4No mentions in the other 2 chaptersSource: the Body of Knowledgev0.5.0
NIST AI RMF: mentions per chapter193 mentions of the term across 21 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter00 Preface: 4 mentions40001 Definition: 2 mentions20102 Why Now: 4 mentions40203 Values & Principles: 4 mentions40304 The Stack: 14 mentions140405 Patterns: 4 mentions40506 The Role: 8 mentions80607 Maturity Model: 2 mentions20708 Regulatory Map: 19 mentions190810 Reading List: 12 mentions121011 AI Defined: 2 mentions21112 Governance Program: 14 mentions141213 Risk Management: 22 mentions221314 Development: 12 mentions121415 Deployment: 14 mentions141516 Fairness & XAI: 4 mentions41617 Incidents: 6 mentions61718 EU AI Act: 2 mentions21819 Privacy & AI: 18 mentions1819202122 Principles & Standards: 22 mentions222223 AI Agents: 4 mentions423Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of NIST AI RMF per chapter
ChapterMentionsCross-referenced
00 Preface4No
01 Definition2No
02 Why Now4No
03 Values & Principles4No
04 The Stack14No
05 Patterns4No
06 The Role8No
07 Maturity Model2No
08 Regulatory Map19Yes
10 Reading List12No
11 AI Defined2No
12 Governance Program14No
13 Risk Management22No
14 Development12No
15 Deployment14No
16 Fairness & XAI4No
17 Incidents6No
18 EU AI Act2No
19 Privacy & AI18No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards22Yes
23 AI Agents4No

Patterns that use this term

33 pattern pages use the term; the 10 that use it most:

NIST AI RMF: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern01 Govern-as-Code02 Inventory04 Runtime ControlsNIST AI RMFRelated terms (5)AI RMF Playbook · RelatedAI RMF PlaybookAI RMF profile · RelatedAI RMF profileAICM · RelatedAICMRisk management · RelatedRisk managementTrustworthy characteristics (NIST) · RelatedTrustworthy characteristicsPatterns using it most (6)AI Threat Model, 7 mentions · Uses the termAI Threat ModelDeactivation, Localisation & Retirement Runbook, 8 mentions · Uses the termDeactivationFramework Crosswalk, 10 mentions · Uses the termFramework CrosswalkTraining-Data Rights Ledger, 7 mentions · Uses the termTraining-Data Rights LedgerUse-Case Intake & Risk Tiering, 9 mentions · Uses the termUse-Case Intake & Risk TieringVendor / Model Due-Diligence Gate, 10 mentions · Uses the termVendor / Model Due-Diligence
NIST AI RMF: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedColour: stack layer of the pattern01 Govern-as-Code02 Inventory04 Runtime ControlsRelated terms (5)AI RMF Playbook · RelatedAI RMF PlaybookAI RMF profile · RelatedAI RMF profileAICM · RelatedAICMRisk management · RelatedRisk managementTrustworthy characteristics (NIST) · RelatedTrustworthy characteristicsPatterns using it most (6)AI Threat Model, 7 mentions · Uses the termAI Threat ModelDeactivation, Localisation & Retirement Runbook, 8 mentions · Uses the termDeactivationFramework Crosswalk, 10 mentions · Uses the termFramework CrosswalkTraining-Data Rights Ledger, 7 mentions · Uses the termTraining-Data Rights LedgerUse-Case Intake & Risk Tiering, 9 mentions · Uses the termUse-Case Intake & Risk TieringVendor / Model Due-Diligence Gate, 10 mentions · Uses the termVendor / Model Due-DiligenceNIST AI RMF
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of NIST AI RMF
FamilyItemRelation
Related termsAI RMF PlaybookRelated
Related termsAI RMF profileRelated
Related termsAICMRelated
Related termsRisk managementRelated
Related termsTrustworthy characteristics (NIST)Related
Patterns using it mostAI Threat Model, 7 mentionsUses the term
Patterns using it mostDeactivation, Localisation & Retirement Runbook, 8 mentionsUses the term
Patterns using it mostFramework Crosswalk, 10 mentionsUses the term
Patterns using it mostTraining-Data Rights Ledger, 7 mentionsUses the term
Patterns using it mostUse-Case Intake & Risk Tiering, 9 mentionsUses the term
Patterns using it mostVendor / Model Due-Diligence Gate, 10 mentionsUses the term
  • Trustworthy characteristics (NIST)

    The seven characteristics of trustworthy AI in the NIST AI RMF: valid and reliable; safe; secure and resilient; accountable and transparent; explainable and…

  • AI RMF Playbook

    NIST's online companion to the AI RMF.

  • Risk management

    The organised practice of steering an organisation's decisions with its risks in view: identify, assess, treat and monitor, in a loop.

  • AI RMF profile

    An application of the AI RMF Core to a context.

  • AICM

    The CSA AI Controls Matrix, a control framework (v1.1, 247 control objectives across 18 domains) that maps to ISO 42001, ISO 27001 and NIST AI RMF and…

Sources

  1. [1] NIST AI Risk Management Framework 1.0 (Govern, Map, Measure, Manage); OSCAL. NIST. 2023. https://www.nist.gov/itl/ai-risk-management-framework (verified: primary)
  2. [2] Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (risk tolerance and residual risk; seven trustworthy characteristics; transparency answers "what happened", explainability "how", interpretability "why"; MAP 1.1 intended purposes; MANAGE 1.1 go/no-go determination; profiles). NIST. 2023-01-26. https://doi.org/10.6028/NIST.AI.100-1 (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). NIST AI RMF. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/nist-ai-rmf. CC BY 4.0

BibTeX

@misc{aige2026nistairmf,
  author  = {Jorge García Aibar},
  title   = {{NIST AI RMF}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/nist-ai-rmf}
}