NIST AI Risk Management Framework: What It Is and How It Supports EU AI Act Compliance
NIST AI RMF is voluntary guidance from January 2023. Learn the four core functions and how they map to EU AI Act articles in Regulation (EU) 2024/1689.
The US National Institute of Standards and Technology published the AI Risk Management Framework (AI RMF 1.0) in January 2023. It is voluntary, non-binding, and not certifiable — a governance model, not a regulation. No authority will fine you for ignoring it. The EU AI Act (Regulation (EU) 2024/1689), by contrast, is binding law with a fine ceiling of €35 million or 7% of worldwide turnover. The two frameworks operate in different registers entirely.
That distinction matters before anything else: adopting the NIST AI RMF does not substitute for legal compliance with the EU AI Act, and no regulator will treat RMF alignment as evidence of conformity under Article 43. What the RMF does offer is a structured operating model for AI governance that maps onto many of the EU Act's obligations in practice — making it a useful companion, not a shortcut.
What the NIST AI RMF actually contains
The framework is built around four core functions:
- GOVERN — establish the policies, culture, roles, and accountability structures for AI risk management across the organisation.
- MAP — identify the AI system's context, intended use, and potential risks before deployment.
- MEASURE — analyse and assess those risks using quantitative and qualitative methods.
- MANAGE — prioritise and treat identified risks, and monitor for new ones once the system is live.
These four functions are not a linear checklist. They are intended to run concurrently and iteratively across an AI system's lifecycle.
Two companion documents extend the core: the AI RMF Profiles, which help organisations tailor the framework to their specific context, and the AI RMF Playbook, which breaks each function into subcategories and suggested actions. In July 2024, NIST added the Generative AI Profile (NIST AI 600-1), addressing the specific risks of foundation models and generative AI — including issues like data provenance, hallucination, and homogenisation of outputs.
The RMF also defines seven characteristics of trustworthy AI that good governance should work toward: valid and reliable; safe; secure and resilient; accountable and transparent; explainable and interpretable; privacy-enhanced; fair with harmful bias managed. These are aspirational properties, not auditable pass/fail criteria.
How the four functions map onto EU AI Act obligations
The mapping is not exact — the RMF is principles-based, the EU Act is prescriptive — but the functional alignment is real.
GOVERN → Article 9 and Article 17
The RMF's GOVERN function asks organisations to define accountability, set risk tolerance, and put governance structures in place before a system reaches the market. The EU AI Act demands precisely this for high-risk systems: Article 9 requires a documented risk management system covering identification, analysis, and mitigation of foreseeable risks across the full lifecycle. Article 17 requires a quality management system covering risk management procedures, data governance, technical documentation, record-keeping, and post-market monitoring. If you have already built a functioning GOVERN layer in the RMF sense, you have the skeleton of both articles.
MAP → Article 6 (classification) and Article 11 (technical documentation)
The RMF's MAP function involves cataloguing your system's purpose, context, and stakeholders before you can assess its risk. That activity directly supports two EU Act obligations. Article 6 requires you to classify your system — does it fall into one of the eight Annex III high-risk areas (biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, justice/democracy)? Does it function as a safety component in a regulated Annex I product? Article 11, read alongside Annex IV, requires you to document the system's intended purpose, architecture, training data, and performance metrics before placing it on the market. Annex IV also requires documenting the measures that enable effective human oversight under Article 14. Good MAP work produces the raw material for that Annex IV file.
MEASURE → Article 15 (accuracy, robustness, cybersecurity) and Article 10 (data governance)
The RMF's MEASURE function asks organisations to quantify and track AI risks through testing, red-teaming, and ongoing evaluation. The EU Act translates this into binding requirements: Article 15 requires high-risk systems to achieve appropriate levels of accuracy and robustness and to remain resilient against attempts to alter outputs through adversarial input. Article 10 requires training, validation, and testing datasets to be relevant, representative, and free of errors — with specific attention to biases that could lead to prohibited discrimination. NIST Measure practices — bias audits, performance stratification across demographic groups, adversarial testing — directly build the evidence base Article 15 and Article 10 require.
MANAGE → Article 14 (human oversight) and Article 72 (post-market monitoring)
The RMF's MANAGE function covers response and recovery: treating risks, updating systems, and monitoring in production. Article 14 requires that high-risk systems be designed so that natural persons can effectively oversee them — including the ability to understand outputs, detect anomalies, and override or disable the system. This is not a paperwork obligation; it requires genuine design decisions. Article 72 requires providers to run a post-market monitoring system that actively collects and analyses data on system performance throughout its lifetime. Where a serious incident occurs, providers must report to the relevant market-surveillance authority under Article 73 — with timelines of 15 days in most cases, 2 days for widespread infringement or critical-infrastructure disruption, and 10 days where a death has occurred.
Where the RMF stops and the EU Act begins
The RMF leaves organisations free to define what "good enough" looks like. The EU AI Act does not. Several obligations have no real RMF equivalent:
Conformity assessment (Article 43). Before a high-risk system is placed on the market, providers must complete a formal conformity assessment. For most Annex III systems, this is an internal assessment (Annex VI). For Annex III point 1 biometric systems where harmonised standards are not applied, a notified body must be involved (Annex VII). No NIST function maps to this gate.
Technical documentation retention (Article 18). High-risk AI technical documentation must be kept for 10 years after the system is placed on the market. The RMF has no equivalent retention obligation.
EU database registration (Article 49). High-risk AI systems must be registered in the EU's public database before deployment. This is an administrative legal step; it does not exist in any RMF context.
Fundamental Rights Impact Assessment (Article 27). Public-body deployers — and private deployers of Annex III 5(b) creditworthiness or 5(c) life/health insurance systems — must conduct a FRIA before use. The RMF's MAP function shares some of the spirit (identifying affected populations), but the FRIA is a specific legal document, not a general risk-context exercise.
Deadlines and enforcement. The EU Act applies to stand-alone high-risk Annex III systems from 2 December 2027 (deferred from the original date under the Digital Omnibus agreed in May 2026; formal adoption expected before August 2026). High-risk AI embedded in Annex I regulated products must comply from 2 August 2028. Article 5 prohibitions have applied since 2 February 2025. The RMF has no dates, no enforcement mechanism, and no regulator.
The Generative AI Profile (NIST AI 600-1)
Published in July 2024, NIST AI 600-1 extends the core RMF to address the distinctive risks of generative AI and foundation models: data provenance and copyright; hallucination and confabulation; human-AI configuration (over-reliance); information security (prompt injection, data extraction); and the homogenisation risk of deployers using a small number of foundation models. For organisations building on top of general-purpose AI models — which the EU Act classifies as GPAI models under Chapter V — the Generative AI Profile is the most practically relevant part of the NIST corpus. It does not replace the EU Act's GPAI obligations under Articles 53 and 55, but it provides a structured vocabulary for the governance work those articles require.
How Confir helps
Confir cross-maps controls to both the EU AI Act and the NIST AI RMF. When you classify an AI system in Confir, its rule-based engine derives your obligations under Articles 5, 6, 9, 11, 14, 15, and 43 — and surfaces the RMF functions they correspond to. The output is deterministic and reproducible: same intake, same finding, with the rule that fired visible in plain language. You can start your free trial at confir.eu.
For the focused comparison between the two frameworks — how they differ on scope, enforceability, and documentation requirements — see the NIST AI RMF vs EU AI Act comparison.
Frequently asked questions
Is NIST AI RMF compliance required for EU AI Act purposes?
No. The NIST AI RMF is a voluntary US framework. The EU AI Act does not reference it and no EU regulator will treat RMF alignment as evidence of legal compliance. However, organisations that have structured their AI governance around the RMF's GOVERN, MAP, MEASURE, and MANAGE functions will find that much of the work — documented risk management, data quality controls, performance testing, human oversight design — maps directly onto EU Act obligations. The RMF is a useful starting point; the EU Act is the legal floor.
When does the EU AI Act apply to high-risk AI systems?
Under the Digital Omnibus agreed in May 2026, stand-alone high-risk systems falling under Annex III apply from 2 December 2027. High-risk AI embedded in Annex I regulated products (machinery, medical devices, vehicles, etc.) applies from 2 August 2028. Article 5 prohibitions have been in force since 2 February 2025. Limited-risk transparency obligations under Article 50 apply from 2 August 2026. These dates have not been deferred.
What is the Generative AI Profile and why does it matter?
NIST AI 600-1, published July 2024, extends the core AI RMF to cover foundation models and generative AI systems. It addresses specific risks including hallucination, data provenance, prompt injection, and homogenisation effects. Organisations that deploy or build on GPAI models — which the EU AI Act regulates under Chapter V (Articles 51–56) — will find the profile useful for structuring the governance work Articles 53 and 55 require, without mistaking it for a substitute for those legal obligations.
What are the penalties for EU AI Act non-compliance?
Article 99 establishes three tiers, each "whichever is higher" of a fixed sum or a percentage of total worldwide annual turnover. Breaches of Article 5 prohibited practices: €35 million or 7%. Non-compliance with most other obligations, including high-risk requirements and provider/deployer duties: €15 million or 3%. Supplying incorrect or misleading information to authorities or notified bodies: €7.5 million or 1%. For companies, Article 99(6) caps fines at the lower of the percentage or the fixed amount — a genuine proportionality protection. GPAI-provider fines are governed separately by Article 101.
Does ISO/IEC 42001 certification satisfy the NIST AI RMF or the EU AI Act?
Neither fully. ISO/IEC 42001:2023 is a management-system standard for AI governance (38 controls across Annex A), sharing the harmonised structure of ISO 27001 and 9001. Certification supports an Article 17 quality management system and builds evidence for the Article 9 risk management system. It does not substitute for the Article 43 conformity assessment, which is the binding pre-market gate for high-risk systems. The NIST AI RMF and ISO 42001 are governance tools; Article 43 conformity is the legal requirement.
Related guides
- NIST AI RMF vs EU AI Act comparison
- multi-framework governance approach
- EU AI Act compliance checklist
- responsible AI governance framework
- Article 6 risk classification tool
- Article 9 risk management system
- risk classification levels guide
- EU AI Act implementation roadmap
- Article 8: compliance chapeau explained
Manage your EU AI Act compliance in one place
Confir automates risk classification, technical documentation, and audit trails for any company. No consultants. No 6-month projects. 7-day free trial.
Start free trial →