NIST AI RMF
AIGP glossary · Last reviewed: · By Victor Humenhuk (AIGP certified)
NIST AI RMF - US National Institute of Standards and Technology AI Risk Management Framework; nonbinding but widely referenced in procurement.
In the AIGP body of knowledge, NIST AI RMF comes up under Module 2: AI Impacts & Responsible AI · BoK II.A; Module 3: Governance & Risk Management · BoK II.D; Module 4: AI Regulation · BoK IV.C.
NIST AI RMF in context
- The [[Sociotechnical Harms taxonomy]] has five themes; the [[CSET AI Harm Taxonomy]] defines AI harm with ==four elements, all four must be present==; and the [[NIST AI RMF]] defines risk as ==probability × magnitude==. (Three AI harms taxonomies)
- The [[NIST AI RMF]] has four pieces (framework, Core, Playbook, GenAI Profile) plus [[NIST ARIA]]. (NIST AI RMF: the full kit)
- ==Tier 1 foundational== guardrails apply to every system and follow ==ISO/IEC 42001 and the NIST AI RMF==; ==Tier 2 risk-based== guardrails are sized to the use case (retail bot vs banking disputes bot); ==Tier 3 societal== guardrails address communities, industries and the environment. (The three-tier guardrail framework)
Where NIST AI RMF is covered in the AIGP study notes
- Three AI harms taxonomies
- NIST AI RMF: the full kit
- General-purpose AI models
- The three-tier guardrail framework
Related terms
- Sociotechnical Harms taxonomy
- CSET AI Harm Taxonomy
- AI Incident Database (AIID)
- Trustworthy AI characteristics
- NIST Core functions
- TEVV
- NIST Playbook
- Generative AI Profile
- NIST ARIA
- General-Purpose AI (GPAI)
Test yourself on NIST AI RMF
Recognising a definition is not the same as applying it in an exam scenario. Work through the free AIGP practice questions, or read the full AIGP study guide - every study note is free.