Federal AI Governance

NIST AI RMF (AI 100-1)

NIST Artificial Intelligence Risk Management Framework 1.0, published January 26, 2023 as NIST AI 100-1, the voluntary framework federal agencies and many private organizations use to govern AI risk. The framework organizes around four functions (Govern, Map, Measure, Manage) and is paired with the NIST AI RMF Playbook for implementation guidance. The Generative AI Profile (NIST AI 600-1, July 2024) extends the framework to large language models and other foundation models. The framework is voluntary; OMB M-25-21 makes substantial elements of it operationally mandatory for federal agencies.

The Authority Brief

One compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.