Does NIST AI Risk Management Framework require Risk Assessment?

United States • voluntary

Yes — 1 provision

Requirements at a glance

This regulation imposes 4 specific requirements for Risk Assessment across 1 provision:

Risk Management Framework #

Obligation:
Risk Assessment
voluntary
Effective:
Jan 26, 2023
Risk tier:
all
Scope:
providers, deployers

Requirements

RequirementDetails
GovernEstablish AI risk governance
MapIdentify and categorize AI risks
MeasureAssess and track risks
ManagePrioritize and mitigate risks

Penalties

ViolationFine
N/AVoluntary framework; no penalties. Used as safe harbor reference by state laws.
View full regulation View obligation Obligation matrix