Skip to content

Global

NIST AI RMF

NIST's framework for managing the risks of AI systems.

NIST AI RMF requirements, each mapped to orta controls72

Who it applies to

Organisations that build or use AI and want to show it is governed.

What it can cost

Lost deals, failed audits and penalties set by your regulator or contract.

Version
1.0, January 2023
Functions
Govern, Map, Measure, Manage
Status
Voluntary

What NIST AI RMF asks of you

  1. 01AI governance and accountability
  2. 02Context and risk mapping
  3. 03Measurement and testing
  4. 04Risk treatment
  5. 05Transparency
  6. 06Third-party AI

How orta covers NIST AI RMF

72 NIST AI RMF requirements, mapped

Each requirement is linked to orta's common controls, so evidence you already have counts here too.

Checked from your own systems

Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.

Ready for your auditor

Give them a read-only login to see controls, evidence and documents in one place.

What feeds it

Also in Global

Know where you stand before a regulator asks.