Compliance Colleague · Standards · United States

NIST AI Risk Management Framework (AI RMF 1.0): cited answers and gap reviews

An AI compliance assistant for AI risk managers and governance teams · updated 2026-10-03

The NIST AI RMF is a voluntary framework for managing AI risk across four functions: Govern, Map, Measure and Manage. Compliance Colleague covers the core, the Playbook and the Generative AI Profile, and maps the RMF to the EU AI Act and ISO 42001.

Try it on your own NIST AI RMF work: one document review or two questions, free for 30 days, no card required. Start free →

What it covers

The four functions: Govern, Map, Measure, Manage
The AI RMF Playbook and AI risk profiles
NIST AI 600-1, the Generative AI Profile
Trustworthy-AI characteristics: validity, safety, bias, transparency, explainability
OMB memo M-25-21 for federal agencies

Questions you can ask

“What does the Map function expect before we deploy a model?”
“Which Generative AI Profile risks apply to an internal chatbot?”
“How does the AI RMF line up with EU AI Act provider duties?”

Every answer cites the NIST AI RMF requirement, article or control it rests on, so you can check it in seconds.

What you can upload for review

An AI use policy checked against the Govern function
An AI system inventory (Excel or CSV) checked for risk and owner gaps
A model pipeline diagram checked for measurement and monitoring points

Files: PDF, Word, Excel or CSV, Visio (.vsdx), draw.io, or an image such as a screenshot. Choose a full review, a prioritized fix list (each gap with its fix and the evidence an assessor will expect) or a short summary, and download the result as Word or PDF.

Crosswalk NIST AI RMF to other standards

With NIST AI RMF in your plan you can compare it against any standard in the library and see where they align and exactly where they don’t. Common pairings:

What it’s built from

Compliance Colleague carries the official text and checks its answers against it: NIST AI 100-1: Artificial Intelligence Risk Management Framework (AI RMF 1.0) (National Institute of Standards and Technology (NIST)); NIST AI 600-1: AI RMF Generative Artificial Intelligence Profile (National Institute of Standards and Technology (NIST)).

Re-checked every month for new versions, deadlines and penalty changes. Full list on the sources page.

More United States standards

NIST CSF · NIST SP 800-53 · FedRAMP · CMMC 2.0 · HIPAA · CCPA / CPRA · ITAR · EAR · TSA Security Directives · Section 508

Compliance Colleague covers 30+ security, privacy and AI governance standards. It reviews policies, spreadsheets and diagrams and answers questions with the clause cited; your judgment and sign-off stay with you. Try it free, no card required →

Research aid, not legal or audit advice, and not an audit opinion or certification. Verify findings against the official text before relying on them.