Does NIST AI Risk Management Framework require Risk Assessment?
United States • voluntary
Yes — 1 provision
Requirements at a glance
This regulation imposes 4 specific requirements for Risk Assessment across 1 provision:
- Govern — Establish AI risk governance
- Map — Identify and categorize AI risks
- Measure — Assess and track risks
- Manage — Prioritize and mitigate risks
Risk Management Framework #
Requirements
| Requirement | Details |
|---|---|
| Govern | Establish AI risk governance |
| Map | Identify and categorize AI risks |
| Measure | Assess and track risks |
| Manage | Prioritize and mitigate risks |
Penalties
| Violation | Fine |
|---|---|
| N/A | Voluntary framework; no penalties. Used as safe harbor reference by state laws. |