NIST-RMF-MS-1-01
Risk Management
MS-1 — Appropriate Methods and Metrics
Select and implement measurement approaches for AI risks starting with most significant
Description
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
NIST-RMF-MS-1-02
Documentation
Document risks that cannot or will not be measured
NIST-RMF-MS-1-03
Monitoring
Regularly assess appropriateness of AI metrics and effectiveness of controls
NIST-RMF-MS-1-04
Monitoring
Include error reports in regular assessments of metrics and controls
NIST-RMF-MS-1-05
Risk Management
Consider potential impacts on affected communities in assessments
NIST-RMF-MS-1-06
Human Oversight
Involve internal experts who were not front-line developers in assessments
NIST-RMF-MS-1-07
Human Oversight
Involve independent assessors in regular assessments and updates
NIST-RMF-MS-1-08
Human Oversight
Consult domain experts in assessments as necessary per risk tolerance
NIST-RMF-MS-1-09
Human Oversight
Consult users in assessments as necessary per organizational risk tolerance
NIST-RMF-MS-1-10
Human Oversight
Consult external AI actors in assessments as necessary per risk tolerance
NIST-RMF-MS-1-11
Human Oversight
Consult affected communities in assessments as necessary per risk tolerance
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started