NIST AI RMF

A voluntary framework from the National Institute of Standards and Technology for managing AI risk. Organized around four functions -- Govern, Map, Measure, Manage -- it provides a structured approach to identifying, assessing, and mitigating AI risks. Not legally binding in the US, but increasingly referenced by regulators, customers, and partners as a baseline expectation for AI risk management.