NIST AI RMF
NIST AI Risk Management Framework (AI RMF 1.0)
Published by National Institute of Standards and Technology (NIST), U.S. Department of Commerce · AI RMF 1.0, published January 26, 2023; companion Generative AI Profile (NIST AI 600-1) published July 26, 2024
A voluntary framework to help organizations manage risks from AI systems and incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.
How it’s structured
- 4 core functions: Govern, Map, Measure, Manage
- A companion AI RMF Playbook, plus a Generative AI Profile (NIST AI 600-1) addressing risks specific to generative AI
Who it applies to
Any organization designing, developing, deploying, or using AI systems — voluntary use, developed with both private- and public-sector input.
How Pentforge uses it in an engagement
- Gap analysis and evidence preparation designed for the AI RMF's four functions, scoped to the client's AI/LLM systems
- Risk mapping that incorporates the Generative AI Profile where the client's systems use generative AI
What you get
- A gap register mapped to the Govern / Map / Measure / Manage functions
- A risk register entry set scoped to the client's AI systems
Official source
Pentforge does not issue certificates
We assess against NIST AI RMF — that is a statement about the work, not a certification. Pentforge holds no certifications of its own; the credentials our practitioners hold individually are listed on About.
Request a scoping call