Governance, risk & compliance
NIST AI Risk Management Framework 1.0 + GenAI Profile (NIST-AI-600-1)
SecurityGlobal
Voluntary, vendor-neutral framework for governing, mapping, measuring, and managing risks of AI systems across their lifecycle.
The de-facto North American baseline for AI governance. Two tiers are provided: Essentials (19 category-level outcomes, suited to smaller organizations getting started) and Comprehensive (all 72 subcategories of the AI RMF Core).
The Generative AI Profile guidance is embedded in the question help text.
Official reference: https://www.nist.gov/itl/ai-risk-management-framework
Assessment tiers & levels Lavawall supports
Lavawall assesses NIST AI Risk Management Framework at every level below, so you can start where you are and step up as your program matures.
| Tier / level | What it covers | Builds on lower |
|---|---|---|
| Essentials | Category-level assessment: the 19 outcome categories of the AI RMF Core (GOVERN 1-6, MAP 1-5, MEASURE 1-4, MANAGE 1-4). Right-sized for organizations that use AI tools but do not build AI systems. | Yes |
| Comprehensive | Subcategory-level assessment: all 72 subcategories of the AI RMF Core, with Generative AI Profile guidance. For organizations that build, embed, or operate consequential AI systems. | Yes |
How Lavawall® helps you get to NIST AI Risk Management Framework compliance
Most of NIST AI Risk Management Framework comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to NIST AI Risk Management Framework, and tracks your posture continuously instead of once a year at audit time.
- Assess your current state against NIST AI Risk Management Framework in the Lavawall GRC module, with the questionnaire and control set built in.
- Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
- Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.
Related
Ready to tackle NIST AI Risk Management Framework?
Assess, remediate, and stay audit-ready for NIST AI Risk Management Framework — and every other framework you carry — from one Lavawall® console.
Lavawall® supports NIST AI Risk Management Framework as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.