NIST-RMF-MG-1-04
Documentation
MG-1 — Risk Prioritization and Response
Negative Residual Risk Documentation for Downstream Parties
Description
Organizations must document all negative residual risks (the sum of all unmitigated risks) that affect both downstream acquirers of AI systems and end users.
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started