Understanding and Implementing the NIST AI Risk Management Framework (RMF)

Course details

AI seems to be on everyone’s minds these days. But while it can be helpful, AI poses serious risks, so developing a culture of best practices and guidelines is imperative. Organizations today need to adopt an AI risk management scheme to ensure that the advantages of AI use are preserved but that the risks are mitigated to meet the needs of the business.

In this course, instructor Lyron Andrews provides an overview of the six elements of NIST AI Risk Management Framework (RMF) and demonstrates how they can be applied effectively, efficiently, and ethically within a business. After completing this course, you’ll be ready to implement and maintain a risk management framework at your organization.

Learning objectives
Understand the need for an AI Risk Management Framework (RMF) and describe the key elements and structure of the NIST AI RMF.
Identify and analyze AI risks, impacts, and harms.
Explain how the concepts of trustworthiness, effectiveness, and risk tolerance relate to AI risk management.
Apply the four functions of the AI RMF Core (Govern, Map, Measure, and Manage) to establish context, assess risks, and allocate resources for managing AI risks within an organization.
Utilize AI RMF profiles, actor tasks, and tools to create a specific context for AI risk management activities and compare AI risks to traditional software-related and human interaction risks.

Concepts

0. Introduction

01 - Implement the NIST risk management framework

1. Overview - The Need of an AI Risk Management Framework

02 - Why the need for an AI RMF
03 - The origin and overview of NIST AI RMF

2. Sections 1-2 - Foundational Information Framing Risk

04 - Understanding and addressing risks, impacts, and harms - Sections 1.1
05 - Challenges, measurement, and tolerance - Sections 1.2-1.2.2
06 - Prioritization and integration - Sections 1.2.3-1.2.4
07 - Audience - Section 2

3. Sections 3-4 - AI Risks, Trustworthiness, and Effectiveness

08 - Trustworthiness, valid, and reliable - Sections 3 3.1
09 - Safe, secure, resilient, accountable, and transparent - Sections 3.2 3.4
10 - Explainable, interpretable, and privacy - Sections 3.5 3.6
11 - Fair, with harmful bias managed - Section 3.7
12 - Effectiveness - Section 4

4. Section 5 - Core

13 - AI RMF Core - Section 5
14 - Govern - Section 5.1, C1
15 - Govern - Section 5.1, C2 3
16 - Govern - Section 5.1, C4 6
17 - Map - Section 5.2, C1
18 - Map - Section 5.2, C2 5
19 - Measure - Section 5.3, C1
20 - Measure - Section 5.3, C2 4
21 - Manage - Section 5.4
22 - Using the Playbook to operationalize AI RMF Core

5. Section 6, Appendix A D - AI RMF Profiles

23 - Overview of profiles - Section 6
24 - Overview of Appendices A D

Conclusion

25 - Where do you begin

Understanding and Implementing the NIST AI Risk Management Framework (RMF)

Authors

Lyron Andrews