The US National Institute of Standards and Technology (NIST) has released its Artificial Intelligence Risk Management Framework (AI RMF 1.0), a guidance document for organizations designing, developing, deploying or using AI systems to help manage risk. 

The RMF follows a direction from Congress for NIST to develop the framework and was produced in close collaboration with the private and public sectors.

“This voluntary framework will help develop and deploy AI technologies in ways that enable the US, other nations and organizations to enhance AI trustworthiness while managing risks based on our democratic values,” said Deputy Commerce Secretary Don Graves.

“It should accelerate AI innovation and growth while advancing — rather than restricting or damaging — civil rights, civil liberties and equity for all.” 

NIST says that the framework equips organizations to think about AI and risk differently. It promotes a change in institutional culture, encouraging organizations to approach AI with a new perspective — including how to think about, communicate, measure and monitor AI risks and its potential positive and negative impacts. 

The framework is divided into two parts. The first part discusses how organizations can frame the risks related to AI and outlines the characteristics of trustworthy systems. The second part, the core of the framework, describes four specific functions — govern, map, measure and manage — to help organizations address the risks of systems in practice. These functions can be applied in context-specific use cases and at any stages of the AI life cycle.

NIST plans to update the framework periodically and welcomes suggestions for additions and improvements to the playbook at any time. Comments received by the end of February 2023 will be included in an updated version of the playbook to be released in spring 2023.