Standards guide · NIST AI RMF

NIST AI RMF for agentic and machine-intelligence systems

The AI RMF supplies a risk-management structure. An agentic operating system must still turn that structure into ownership, system records, scenario testing, release thresholds, production telemetry, incident procedures, and reviewable evidence.

EnterpriseGovernmentPartners

Published August 1, 2026Updated August 1, 2026Reviewed August 1, 2026By LongTermIntelligence.com

Direct answer

What is the NIST AI Risk Management Framework?

The NIST AI RMF is a voluntary framework intended to help organizations incorporate trustworthiness considerations into the design, development, use, and evaluation of AI systems. Its Core is organized around four functions—Govern, Map, Measure, and Manage—that should operate continuously rather than as a one-time checklist.

Govern establishes culture, accountability, policy, and oversight.
Map establishes context, intended use, affected parties, dependencies, and risk assumptions.
Measure assesses performance, trustworthiness characteristics, uncertainty, and controls.
Manage prioritizes, responds to, monitors, and communicates risk over time.

Source basis: reviewed official references are listed on this page and in the source ledger. Interpretation and implementation guidance retain the stated assurance boundary.

Agentic translation

From AI RMF function to operating evidence

The framework outcome becomes useful when it is connected to a system owner and an inspectable record.

Function	Agentic-system implementation	Evidence artifact
Govern	Assign business, technical, security, risk, data, and human-authority owners; define change and exception processes.	System card, RACI, policy register, exception log, review cadence
Map	Document objectives, users, affected parties, tools, models, data, identities, environments, authority, and foreseeable misuse.	Context map, AIBOM, data-flow diagram, authority-boundary record, threat model
Measure	Test task quality, handoffs, tool use, security, cost, latency, recovery, and human escalation across representative scenarios.	Evaluation plan, scenario suite, scorecard, trace set, red-team findings
Manage	Set release gates, monitor production, contain incidents, retire unsafe uses, and re-evaluate after material changes.	Release decision, dashboards, risk register, incident review, change record

Implementation check

Minimum questions before claiming alignment

A mapping is useful only when the evidence can be inspected.

Which exact AI RMF version and profile were reviewed?
Who owns each selected outcome and accepts residual risk?
Which system boundary, models, data, tools, users, and decisions are in scope?
Which scenarios and thresholds measure the intended outcome?
Where is production evidence retained, and how is sensitive telemetry protected?
What triggers escalation, rollback, suspension, or retirement?
How will the mapping be updated while AI RMF 1.0 is under revision?

Primary-source basis

Official references

Use the named primary sources for current definitions, dates, versions, and scope.

National Institute of Standards and Technology · Official Framework Hub

NIST AI Risk Management Framework

NIST's voluntary framework for incorporating trustworthiness considerations into the design, development, use, and evaluation of AI systems.

Status: Current With Revision Underway
Published: 2023-01-26
Reviewed: 2026-08-01

Use boundary: Use as risk-management guidance; do not describe alignment as certification or legal compliance.

Open official source

National Institute of Standards and Technology · Official Framework

Artificial Intelligence Risk Management Framework (AI RMF 1.0)

The AI RMF 1.0 core framework organizes voluntary AI risk-management outcomes around Govern, Map, Measure, and Manage.

Status: Current Version Under Revision
Published: 2023-01-26
Reviewed: 2026-08-01

Use boundary: Verify the NIST revision status before describing 1.0 as the latest stable framework.

Open official source

National Institute of Standards and Technology · Official Playbook

NIST AI RMF Playbook

Suggested actions for achieving AI RMF Core outcomes, organized around Govern, Map, Measure, and Manage.

Status: Current Pending Framework Revision
Published: 2023-03-30
Reviewed: 2026-08-01

Use boundary: NIST states that the Playbook is not a checklist to be followed in its entirety.

Open official source

National Institute of Standards and Technology · Official Resource Center

NIST AI Resource Center

NIST's resource center for the AI RMF, profiles, crosswalks, playbook material, use cases, and revision notices.

Status: Current
Reviewed: 2026-08-01

Use boundary: Use this hub to confirm freshness before publishing time-sensitive NIST statements.

Open official source

Official-source citations establish provenance and scope. They do not establish LongTermIntelligence.com certification, endorsement, legal advice, client outcomes, or a guarantee that a control is effective.

NIST AI RMF for agentic and machine-intelligence systems

What is the NIST AI Risk Management Framework?

NIST AI Risk Management Framework

Artificial Intelligence Risk Management Framework (AI RMF 1.0)

NIST AI RMF Playbook

NIST AI Resource Center

Related guidance

Generative AI Profile

AI governance evidence register

Agent Evaluation Scorecard