> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# NIST AI RMF

> Manage AI system risks with the NIST AI Risk Management Framework.

The NIST AI Risk Management Framework (AI RMF) provides voluntary guidance for managing risks associated with artificial intelligence systems. Developed by the National Institute of Standards and Technology, it helps organizations design, develop, deploy, and use AI systems responsibly.

## Who needs NIST AI RMF?

<CardGroup cols={2}>
  <Card title="AI developers" icon="code">
    Organizations building AI/ML systems that need a structured approach to identifying and mitigating AI-specific risks.
  </Card>

  <Card title="AI deployers" icon="rocket">
    Companies using AI systems in production that need to ensure responsible and trustworthy AI operations.
  </Card>
</CardGroup>

## Four core functions

<CardGroup cols={4}>
  <Card title="Govern" icon="gavel">
    Establish policies and processes for AI risk management across the organization.
  </Card>

  <Card title="Map" icon="map">
    Identify and categorize AI systems, their contexts, and associated risks.
  </Card>

  <Card title="Measure" icon="ruler">
    Assess and analyze AI risks using quantitative and qualitative methods.
  </Card>

  <Card title="Manage" icon="sliders">
    Prioritize and respond to AI risks with appropriate controls and mitigations.
  </Card>
</CardGroup>

## Key risk categories

| Category            | Description                                              |
| ------------------- | -------------------------------------------------------- |
| **Bias & Fairness** | AI systems may produce discriminatory or unfair outcomes |
| **Transparency**    | Decisions made by AI should be explainable               |
| **Privacy**         | AI systems must protect personal data                    |
| **Security**        | AI systems are vulnerable to adversarial attacks         |
| **Reliability**     | AI systems must perform consistently and accurately      |
| **Accountability**  | Clear ownership of AI system outcomes                    |

## How DSALTA helps

* **NIST AI RMF controls** mapped to the four core functions
* **AI risk register** to document and score AI-specific risks
* **Policy templates** for AI governance documentation
* **Cross-framework mapping** — overlaps with ISO 42001, EU AI Act, and SOC 2

## Frequently asked questions

<AccordionGroup>
  <Accordion title="Is NIST AI RMF mandatory?" icon="gavel">
    No. NIST AI RMF is a voluntary framework. However, it is increasingly referenced in procurement requirements and is aligned with the EU AI Act's risk-based approach.
  </Accordion>

  <Accordion title="How does it relate to the EU AI Act?" icon="flag">
    The NIST AI RMF and EU AI Act share similar risk-based approaches. Implementing NIST AI RMF provides a strong foundation for EU AI Act compliance.
  </Accordion>
</AccordionGroup>

## How DSALTA automates this

**228** of DSALTA's automated checks contribute evidence to this framework, drawn from **72** integrations. Browse them in the [Compliance Tests](/tests/overview) catalog. They are linked through the controls each check satisfies, so a single check usually contributes to several frameworks at once — the count is not a list of checks unique to this one.

## Related pages

* [ISO 42001](/frameworks/iso42001/overview)
* [EU AI Act](/frameworks/eu-ai-act/overview)