Regulatory Standards · Global
NIST AI Risk Management Framework
Govern AI risk with evidence, not intentions.
The NIST AI RMF gives organisations a structure to govern, map, measure and manage AI risk. Astragar maps it to controls, and Aeguard adds evidence of what AI agents actually do.
Book a NIST AI RMF review✓ Available in Astragar GRC
4
Functions: Govern, Map, Measure, Manage
1.0
Released January 2023
GenAI
Generative AI profile published in 2024
What NIST AI RMF requires
The obligations, in brief.
Govern
Policies, accountability and culture for AI risk.
Map
Understand AI systems, context and potential impacts.
Measure
Assess and track AI risks with appropriate methods.
Manage
Prioritise and act on AI risks, and monitor over time.
How Astragar helps
From checklist to measurable risk.
01
Requirement → control mapping
Map every NIST AI RMF requirement to controls, systems, assets and owners.
02
Evidence, continuously
Collect and maintain evidence, with sign-off from contributor to IT auditor, CISO and executive office.
03
Exposure behind the gaps
See which vulnerabilities and sensitive data put NIST AI RMF controls at risk.
04
Risk in financial terms
Prioritise remediation by business and financial impact, not checklist order.
Aeguard attributes AI-agent activity to owners and logs what agents access, with tamper-evident records.
Sign-off workflow
Evidence Contributor
→IT Auditor
→CISO
→Executive Office
Related · Government, Critical Infrastructure & AI
European Union
NIS2 →
Saudi Arabia
NCA ECC →
European Union
EU CRA →
United States
FedRAMP →
United States
CMMC →
European Union
EU AI Act →
Global
ISO 42001 →
Find the data. Test the controls. Reduce the risk.
Start with a scoped NIST AI RMF review: requirements mapped, evidence gaps found, remediation prioritised by financial impact.
Book a NIST AI RMF reviewAstragar supports compliance programmes with technical evidence and risk analysis. It does not provide legal advice or issue certifications.
See your cyber risk in $ terms, not CVSS scores.
