Sign in

NIST AI RMF

NIST AI Risk Management Framework — NIST (National Institute of Standards and Technology) / AI Resource Center

Also known as: AI RMF, AI RMF 1.0, NIST AI Risk Management Framework, NIST IR 8596, GenAI Profile

Official site Official change log Subscribe to NIST AI RMF (RSS)

Current version
AI RMF 1.0 (NIST AI 100-1)
Published 26 January 2023. source
Status
In force
Next deadline
None announced
Who must comply
Any organization that designs, develops, deploys, evaluates or uses AI products, services or systems. Use is voluntary. source
How it is assessed
Organizations borrow as many or as few of the companion Playbook's voluntary suggestions as apply to them. source
Written by
NIST's Information Technology Laboratory publishes the framework; NIST is not a regulator. The White House AI Action Plan (July 2025) asked NIST to revise it, and NIST says the revision is under way. source
Enforced by
The AI RMF is intended for voluntary use, and NIST is not a regulatory agency. source
Last change
None recorded yet

Voluntary framework for managing risks throughout the AI lifecycle, organized around four functions: Govern, Map, Measure, Manage. Sector- and use-case-specific profiles, such as the Generative AI Profile, adapt it to particular settings.

Recent changes

No changes recorded yet — we are watching, and nothing has been published.

Key dates

No upcoming dates
  1. NIST releases a concept note for an AI RMF Profile on Trustworthy AI in Critical Infrastructure
  2. Preliminary draft of the Cyber AI Profile (NIST IR 8596), a CSF 2.0 profile for AI, released for comment
  3. America's AI Action Plan recommends that NIST revise the AI RMF to remove references to misinformation, diversity, equity and inclusion, and climate change
  4. NIST AI 600-1, the Generative AI Profile of the AI RMF, released
Show 2 earlier dates
  1. NIST launches the Trustworthy and Responsible AI Resource Center to support AI RMF use
  2. AI RMF 1.0 released

Version history

  1. AI RMF 1.0 (NIST AI 100-1) Major versionCurrent

    First version, developed through a request for information, several public drafts and workshops. source

    More
    • It is organized around four functions (Govern, Map, Measure, Manage) and comes with a companion Playbook, Roadmap and Crosswalk.
  2. AI RMF (second draft) Draft

    Second public draft of the framework. source

  3. AI RMF (initial draft) Draft

    Initial public draft of the framework. source

Who it applies to

The AI RMF is intended for voluntary use by anyone building or using AI.

Voluntary use
The AI RMF is intended for voluntary use by anyone building or using AI, to bring trustworthiness into design, development, use and evaluation. source
How NIST describes it
NIST describes it as voluntary, rights-preserving, non-sector-specific and use-case agnostic. source
Profiles
Profiles adapt it to specific settings: the Generative AI Profile (2024) and, in development, a profile for critical infrastructure. source

How compliance is assessed

Organizations borrow as many or as few of the companion Playbook's voluntary suggestions as apply to them.

Self-applied
The companion Playbook suggests actions for each subcategory of the four functions (Govern, Map, Measure, Manage); its suggestions are voluntary, and organizations borrow as many or as few as apply. source

Enforcement and penalties

The AI RMF is intended for voluntary use, and NIST is not a regulatory agency.

Voluntary
The AI RMF is intended for voluntary use, and NIST is not a regulatory agency. source source

Documents

  1. Standard NIST AI 100-1 – Artificial Intelligence Risk Management Framework (AI RMF 1.0) (PDF)
  2. Guidance NIST AI 600-1 – AI RMF Generative Artificial Intelligence Profile (PDF)
  3. Guidance AI RMF Playbook
  4. Guidance NIST AI RMF page (revision status, profiles, translations)
  5. Guidance America's AI Action Plan (July 2025)

Frequently asked questions

What is the latest version of the NIST AI RMF?

AI RMF 1.0, released 26 January 2023 (NIST AI 100-1). NIST states it is being revised as part of the White House AI Action Plan; no revised version had been published as of 18 October 2026. source

Is the NIST AI RMF mandatory?

No. NIST describes it as intended for voluntary use. Obligations arise only where a contract, regulator or other law adopts it. source

What is NIST AI 600-1?

The Generative AI Profile of the AI RMF, released 26 July 2024. It helps organizations identify risks unique to generative AI and proposes actions to manage them. source

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 14 September 2026. Subscribe to NIST AI RMF (RSS)