NIST-RMF-MP-4-01
Risk Management
MP-4 — Third-Party Component Risks and Benefits
Map risks and benefits of all AI system components including third-party elements
Description
Organizations must comprehensively map and document the risks and benefits associated with all components of their AI system, including any third-party software and data components used within the...
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
NIST-RMF-MP-4-02
Risk Management
Implement approaches for mapping AI technology and legal risks of components
NIST-RMF-MP-4-03
Risk Management
Map and document third-party intellectual property infringement risks
NIST-RMF-MP-4-04
Risk Management
Identify internal risk controls for AI system components
NIST-RMF-MP-4-05
Documentation
Document internal risk controls for AI system components
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started