ENTITY / Technology
AI risk management: from impressive output to responsible use
A practical introduction to assessing an AI system in context using the NIST Govern, Map, Measure and Manage functions.
QUICK ANSWER
The useful idea.
AI risk management is a continuous process for understanding a system's context, possible impacts, evidence and controls. NIST organises this work around four connected functions: Govern, Map, Measure and Manage.
The AI RMF is a general risk-management resource, not a product certification.
The functions are connected and intended for continuous use.
Performance alone does not describe human, organisational and societal impacts.
01
Start with the use, not the label
Two products may use similar models while creating different risks because their users, stakes, data and deployment settings differ. Mapping the context clarifies who may benefit, who may be harmed and which failures matter.
A low-stakes drafting assistant and a system influencing access to employment should not be evaluated with the same evidence threshold.
02
Measures need decisions attached
Accuracy, robustness, privacy, explainability and fairness can involve several measures. A number becomes useful when it is connected to a threshold, comparison or action and when the evaluation data resemble the real setting.
Human review is not a magic safeguard. Reviewers need time, authority, relevant information and a clear escalation path. Evaluation should include foreseeable misuse and the experience of people affected by errors, not only the operator's preferred scenario.
03
Treat management as a loop
Governance defines responsibility and risk tolerance. Mapping describes context. Measurement gathers evidence. Management prioritises and responds. Deployment then creates new evidence, which should return to the earlier functions.
The framework does not certify that a system is trustworthy. It helps organisations make assumptions, evidence and trade-offs visible enough to challenge and improve. Documentation should therefore record owners, thresholds, incidents, changes and unresolved risks throughout the system lifecycle.
CONNECTED KNOWLEDGE
Entities on this page
SOURCE DESK
Open the evidence
Important facts and definitions are traced to these primary, governmental or institutional sources. The explanation above is original; links let you inspect the underlying context and updates.
Official voluntary framework and its Govern, Map, Measure and Manage functions.
Accessed 20 August 2026Public terminology resource for AI risk and trustworthiness.
Accessed 20 August 2026
CONNECTED DISCOVERY
One answer should open another.
These destinations share a subject, entity or editorial relationship with this page. They are recommendations, never paid placements.
Keep reading
Replace vague arguments about artificial intelligence with a system-specific route through capabilities, context, NIST risk functions, source checks and decisions that expose missing evidence.
Both explore Artificial intelligenceEXPLORE →hub / TechnologyTechnologyArtificial intelligence, the internet, computers, devices, companies and innovation.
Directly connected to this pageEXPLORE →article / KnowledgeCheck a sourceA fast but serious source-checking workflow: trace the claim, inspect authority, open evidence and corroborate independently.
Directly connected to this pageEXPLORE →article / ScienceScientific modelsWhy a useful scientific model is a purposeful simplification rather than a miniature copy of reality.
Directly connected to this pageEXPLORE →Related entities
Artificial intelligence is a broad field of computational methods and systems associated with tasks such as prediction, generation, classification and decision support. Capabilities, limitations and risks depend on the specific system and context.
Both explore Artificial intelligenceEXPLORE →entity / Standards instituteNISTThe National Institute of Standards and Technology is a United States federal measurement and standards agency. Its public frameworks and terminology help turn broad technology questions into assessable practices.
Both explore Artificial intelligenceEXPLORE →entity / CountryItalyItaly is a southern European republic extending into the Mediterranean. Its geography, regions, institutions, long historical record and membership of the European Union create many connected routes through the knowledge library.
High-quality discovery fallbackEXPLORE →entity / PlanetMarsMars is the fourth planet from the Sun, a cold rocky world with a thin atmosphere, two small moons and geological evidence of ancient water. It connects planetary facts to missions, instruments, models and uncertainty.
High-quality discovery fallbackEXPLORE →Compare the ideas
NASA and NIST are United States federal organizations that produce public technical knowledge, but their missions and outputs differ: NASA centres on air and space, while NIST centres on measurement science, standards and technology.
Both explore NISTEXPLORE →comparison / KnowledgeGDP vs GDP per capitaGDP and GDP per capita begin with the same production aggregate but answer different questions. One describes total economic scale; the other divides that total by population to create a per-person average.
High-quality discovery fallbackEXPLORE →