AI Risk Management Framework

NIST organises AI risk into four functions, Govern, Map, Measure and Manage, and this hub carries the framework itself alongside the companion Playbook of suggested actions, the crosswalks to other standards, and the Generative AI Profile. Because it is the vocabulary US universities and their software vendors already share, working from it lets you write procurement questions, vendor review criteria, and an institutional AI use policy that a general counsel or an auditor will recognise. It is voluntary rather than regulatory, so treat it as the structure you map your own controls onto rather than a checklist to be completed.

Task

Ethics & compliance

Time

45 min

Level

intermediate

Cost

Free — Nothing to pay. A free account at most.

Tools

None in particular

Published

2023-01

Voice

NIST — The reference risk framework US universities and their vendors cite when writing AI procurement and use policy.