NIST AI RMF, from Govern to Manage
The NIST AI Risk Management Framework helps organisations manage the risks of AI systems and build trustworthy AI. It is organised into four functions: Govern, Map, Measure and Manage.
CAPA-21GovernIn progressCAPA-24MeasureOverdueHow NIST AI RMF Is Organised in Arbor
NIST AI RMF loads with its functions, ready to assign and assess.
- 01Govern
- 02Map
- 03Measure
- 04Manage
What Arbor Does with NIST AI RMF
- Functions, categories and subcategories loaded
- AI systems assessed against each function
- AI risks scored and treated in the risk register
- Mapped to ISO 42001 so the work is done once
No Clause Numbers to Memorise
Arbor AI suggests the NIST AI RMF requirements that apply as you work.
NIST AI RMF in Four Steps
Load
NIST AI RMF loads with its full structure, kept up to date by our team.
Set Scope
Decide what applies and record the reason.
Assess
Assign owners, score each requirement and link evidence.
Prove
Close gaps with corrective actions and report with confidence.
Do the Work Once for NIST AI RMF
Where controls overlap, shared evidence counts toward related frameworks, so nothing is done twice.
Frequently Asked Questions
Is NIST AI RMF Kept Up to Date?
Yes. Our team loads NIST AI RMF and updates it when the standard changes.
Can We Import Our Existing NIST AI RMF Assessment?
Yes. Use the Excel template and Arbor checks every row before it loads.
Can NIST AI RMF Share Evidence with Other Frameworks?
Yes. Evidence is uploaded once and linked to every requirement it supports.
See NIST AI RMF in Arbor GRC
Bring your current risk register. We can import it from Excel during the demo, so you see your own risks in Arbor, not ours.