NIST updates its voluntary AI risk framework

NIST’s AI Risk Management Framework is a voluntary guide for managing risks to individuals, organizations, and society associated with AI. Led by the Information Technology Laboratory AI Program and developed with public- and private-sector input, the framework is intended to help organizations incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.

Released on January 26, 2023, the AI RMF 1.0 was created through an open process that included a Request for Information, draft versions for public comment, workshops, and other input opportunities. NIST also published a companion AI RMF Playbook, along with an AI RMF Roadmap, AI RMF Crosswalk, and related Perspectives.

NIST launched the Trustworthy and Responsible AI Resource Center on March 30, 2023 to support implementation and international alignment with the framework. On July 26, 2024, NIST released NIST-AI-600-1, Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile, which identifies risks posed by generative AI and proposes risk management actions aligned with organizational goals and priorities.

The AI RMF 1.0 is being revised. On April 7, 2026, NIST released a concept note for an AI RMF Profile on Trustworthy AI in Critical Infrastructure, aimed at guiding critical infrastructure operators toward specific risk management practices for AI-enabled capabilities.