The NIST AI Risk Management Framework (AI RMF 1.0, published as NIST AI 100-1) organizes AI risk management into four functions. GOVERN cultivates a culture and structure of risk management and applies across the others; MAP establishes context and identifies risks; MEASURE analyzes, assesses and tracks them; MANAGE prioritizes and acts on them. Each function is broken into categories and subcategories describing outcomes.
The AI RMF describes outcomes, not controls. VERITRAIL provides a set of concrete controls, with owners and evidence, that an organization can use to work toward those outcomes. The tables below list every AI RMF subcategory that at least one VERITRAIL control maps to in Control Library v1.0.0.
GOVERN
GOVERN covers policies and processes, accountability structures, workforce and oversight roles, organizational culture, engagement with AI actors, and third-party risk.
| AI RMF subcategory | VERITRAIL controls (indicative) |
|---|---|
| GOVERN 1.1 | AO-01, AO-07, AO-10 |
| GOVERN 1.2 | AO-01, AO-08 |
| GOVERN 1.3 | AO-04, EI-02 |
| GOVERN 1.4 | AO-12, GL-03, GL-04, SE-02, SE-05 |
| GOVERN 1.5 | EI-11, GL-12, SE-03, SE-07 |
| GOVERN 1.6 | EI-01, EI-05, EI-07, EI-09 |
| GOVERN 1.7 | GL-09 |
| GOVERN 2.1 | AO-02, AO-03, AO-06, EI-03 |
| GOVERN 2.2 | AO-05 |
| GOVERN 2.3 | AO-02 |
| GOVERN 3.2 | IS-09, IS-13 |
| GOVERN 4.2 | SE-11 |
| GOVERN 4.3 | AO-06 |
| GOVERN 5.1 | AO-11 |
| GOVERN 5.2 | AO-11 |
| GOVERN 6.1 | AO-09, EI-08, GL-11, IS-10 |
| GOVERN 6.2 | AO-09 |
VERITRAIL controls cited
- AO-01 AI governance policyNIST AI RMF: GOVERN 1.1, GOVERN 1.2ISO/IEC 42001: 5.2, A.2.2, A.2.4EU AI Act: Art. 17, Art. 26
- AO-02 Executive accountability and AI governance forumNIST AI RMF: GOVERN 2.1, GOVERN 2.3ISO/IEC 42001: 5.1, 5.3, A.3.2EU AI Act: Art. 17
- EI-01 Enterprise AI inventory (system of record)NIST AI RMF: GOVERN 1.6ISO/IEC 42001: A.4.2, 7.5EU AI Act: Art. 26, Art. 49
- IS-13 Human approval for high-impact actionsNIST AI RMF: GOVERN 3.2, MANAGE 2.2ISO/IEC 42001: A.9.2, A.6.2.6EU AI Act: Art. 14
Framework mappings are indicative VERITRAIL interpretations (Control Library v1.0.0); they are not legal advice and do not establish conformity or compliance.
MAP
MAP covers establishing context and intended purpose, categorizing the system, understanding capabilities and costs, mapping risks across components including third-party ones, and characterizing impacts.
| AI RMF subcategory | VERITRAIL controls (indicative) |
|---|---|
| MAP 1.1 | AO-10, EI-02, EI-04, EI-12, GL-01, GL-02, IS-03 |
| MAP 1.2 | EI-04 |
| MAP 1.5 | AO-04, EI-02 |
| MAP 1.6 | GL-01 |
| MAP 2.2 | GL-06 |
| MAP 2.3 | EI-06, IS-02 |
| MAP 3.1 | GL-02 |
| MAP 3.4 | EI-04 |
| MAP 3.5 | IS-09 |
| MAP 4.1 | EI-05, EI-07, EI-10, GL-11 |
| MAP 4.2 | EI-10 |
| MAP 5.1 | GL-02, IS-01, IS-06 |
VERITRAIL controls cited
- EI-04 Intended purpose and context of useNIST AI RMF: MAP 1.1, MAP 1.2, MAP 3.4ISO/IEC 42001: A.6.2.2, A.9.4EU AI Act: Art. 11, Art. 13
- GL-01 Intake triage workflowNIST AI RMF: MAP 1.1, MAP 1.6ISO/IEC 42001: 8.1, A.6.1.3EU AI Act: Art. 9
- GL-02 Pre-deployment risk and impact assessmentNIST AI RMF: MAP 1.1, MAP 3.1, MAP 5.1, MEASURE 1.1ISO/IEC 42001: 6.1.4, 8.4, A.5.2, A.5.3, A.5.4EU AI Act: Art. 9, Art. 27
Framework mappings are indicative VERITRAIL interpretations (Control Library v1.0.0); they are not legal advice and do not establish conformity or compliance.
MEASURE
MEASURE covers selecting methods and metrics, evaluating trustworthy characteristics — validity, safety, security and resilience, transparency, privacy, fairness and others — tracking risks over time, and gathering feedback on measurement efficacy.
| AI RMF subcategory | VERITRAIL controls (indicative) |
|---|---|
| MEASURE 1.1 | GL-02 |
| MEASURE 1.3 | SE-01, SE-10 |
| MEASURE 2.1 | GL-05, IS-02 |
| MEASURE 2.3 | GL-05 |
| MEASURE 2.4 | SE-12 |
| MEASURE 2.5 | GL-05, IS-07 |
| MEASURE 2.6 | IS-06 |
| MEASURE 2.7 | IS-01, IS-10, IS-11, IS-12, IS-14 |
| MEASURE 2.8 | IS-08, SE-08 |
| MEASURE 2.9 | GL-06, IS-08, SE-05, SE-11 |
| MEASURE 2.10 | EI-06, IS-03, IS-04 |
| MEASURE 2.11 | IS-05 |
| MEASURE 3.1 | GL-08, SE-12 |
| MEASURE 4.1 | SE-01 |
VERITRAIL controls cited
- IS-05 Bias and fairness testingNIST AI RMF: MEASURE 2.11ISO/IEC 42001: A.5.4, A.7.4EU AI Act: Art. 10
- IS-07 Accuracy and robustness testingNIST AI RMF: MEASURE 2.5ISO/IEC 42001: A.6.2.4EU AI Act: Art. 15
- IS-14 Prompt-injection and data-leakage testingNIST AI RMF: MEASURE 2.7ISO/IEC 42001: A.6.2.4EU AI Act: Art. 15
- SE-12 Model performance and drift monitoringNIST AI RMF: MEASURE 2.4, MEASURE 3.1ISO/IEC 42001: A.6.2.6EU AI Act: Art. 72, Art. 15
Framework mappings are indicative VERITRAIL interpretations (Control Library v1.0.0); they are not legal advice and do not establish conformity or compliance.
MANAGE
MANAGE covers prioritizing and responding to risks, strategies to maximize benefits and minimize negative impacts (including mechanisms to supersede, disengage or deactivate systems), managing third-party risk, and risk treatment including incident response, recovery and communication.
| AI RMF subcategory | VERITRAIL controls (indicative) |
|---|---|
| MANAGE 1.1 | GL-03 |
| MANAGE 1.2 | GL-07 |
| MANAGE 1.3 | GL-10 |
| MANAGE 1.4 | GL-10 |
| MANAGE 2.1 | GL-07 |
| MANAGE 2.2 | IS-11, IS-12, IS-13, IS-16 |
| MANAGE 2.3 | SE-04 |
| MANAGE 2.4 | GL-04, GL-09, IS-12, IS-15 |
| MANAGE 4.1 | GL-08, SE-08, SE-09 |
| MANAGE 4.2 | SE-03, SE-06 |
| MANAGE 4.3 | SE-04 |
VERITRAIL controls cited
- IS-12 Runtime guardrails and policy enforcementNIST AI RMF: MANAGE 2.2, MANAGE 2.4, MEASURE 2.7ISO/IEC 42001: A.6.2.6EU AI Act: Art. 15, Art. 14
- IS-15 Kill switch and rollbackNIST AI RMF: MANAGE 2.4ISO/IEC 42001: A.6.2.6EU AI Act: Art. 14
- SE-04 AI incident management and reportingNIST AI RMF: MANAGE 4.3, MANAGE 2.3ISO/IEC 42001: 10.2, A.8.4EU AI Act: Art. 73, Art. 26
Framework mappings are indicative VERITRAIL interpretations (Control Library v1.0.0); they are not legal advice and do not establish conformity or compliance.
Known gaps in the mapping
Mapping coverage is uneven, and we would rather say so than imply completeness:
- MANAGE 3 (third-party risk management) has no direct mapping in v1.0.0. Third-party controls (AO-09, EI-08, GL-11, IS-10) currently map to GOVERN 6; organizations using the AI RMF as a reference should consider whether those controls also support MANAGE 3 outcomes in their context.
- Several subcategories — for example parts of GOVERN 3 and GOVERN 4, MAP 2.1, MEASURE 2.2 and MEASURE 2.12–2.13 — are not mapped. That does not mean they are irrelevant; it means VERITRAIL does not yet have a control whose objective clearly corresponds to them.
- The Generative AI Profile (NIST AI 600-1) is not mapped.
Using the mapping in practice
- Choose your reference. If the AI RMF is your organization's chosen reference, use the function view in the self-assessment's readiness indicators to see where self-reported practices are weakest.
- Implement through controls. Work through VERITRAIL controls with owners and evidence rather than trying to "implement a subcategory".
- Evidence once, reuse often. The same evidence for SE-08 or GL-02 supports NIST, ISO/IEC 42001 and EU AI Act readiness work.
- Profile your organization. The AI RMF encourages organizations to build profiles for their context. VERITRAIL risk tiers and the maturity model can inform your current and target profiles.
The self-assessment groups questions into GOVERN, MAP, MEASURE and MANAGE readiness indicators — see the maturity model. Browse full mappings per control in the control library.