The NIST AI RMF is a voluntary framework organized into four functions: Govern, Map, Measure and Manage. It gives risk, technology and procurement teams a shared structure for reviewing generative and agentic AI components that SR 26-2 leaves out of scope, and its Generative AI Profile adds specific risks to test.
