The OECD.AI Policy Navigator

Our policy navigator is a living repository from more than 80 jurisdictions and organisations. Use the filters to browse initiatives and find what you are looking for.

NIST AI Risk Management Framework


-
Added by:   National contact point
Added on:   06 May 2026
Updated by:   OECD analyst
Updated on:   03 Jun 2026

The NIST AI Risk Management Framework (AI RMF) is intended for voluntary use and to improve the ability to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.

Initiative overview

The AI RMF (NIST AI 100) is a non-regulatory document developed through a consensus-driven, open process including Requests for Information, multiple public comment periods, and workshops. It is structured around four core functions: Govern (culture and accountability), Map (context and risk identification), Measure (risk analysis and evaluation), and Manage (risk response and monitoring). The framework is voluntary, technology-neutral, and adaptable to organizations of all sizes. It is widely referenced in US federal policy and international standards. Target audience spans AI developers, deployers, evaluators, and governance professionals across all sectors and organization types. Pursuant to America’s AI Action Plan, NIST is in the process of revising the AI RMF to eliminate references to misinformation, Diversity, Equity, and Inclusion, and climate change, and to ensure that the framework keeps pace with rapid AI advancements. The updates will improve focus on making the framework a practical, flexible, and voluntary tool for increasing AI reliability and adoption.

About the policy initiative