COURSE 18L1100% FREE
Verified 2026-08-14

NIST GenAI Profile and TEVV

NIST’s **AI Risk Management Framework (AI RMF 1.0)** (Jan 2023) is a voluntary, cross-sector guide to manage AI risks and promote trustworthy use. The **Generative AI Profile** (NIST AI 600-1, published July 26, 2024) is a companion prof...

What it is

NIST’s AI Risk Management Framework (AI RMF 1.0) (Jan 2023) is a voluntary, cross-sector guide to manage AI risks and promote trustworthy use. The Generative AI Profile (NIST AI 600-1, published July 26, 2024) is a companion profile for generative AI risks across the lifecycle. The NIST AI Resource Center (AIRC) hosts resources to operationalize the RMF, including TEVV—test, evaluation, verification, and validation.

HIGH PRIORITYFLOWCHART
◷ IN PRODUCTION

Visual Spec & Architecture Diagram

NIST TEVV cycle: Test → Evaluate → Verify → Validate (loop) tied to GenAI profile risk management boxes (Govern/Map/Measure/Manage literacy). Dated 'check live NIST'. No fake agency seal.

Educational Focus: Connects US measurement framing to practice.

Why it matters

US practice often points to NIST for *how to think about* measurement and governance—even when statutes differ by sector. Literacy: RMF is voluntary and flexible; it is not a product certification by itself.

How it works (plain)

  1. Govern / Map / Measure / Manage (RMF core functions at a high level).
  2. Use the GenAI Profile to surface generative-specific risks (hallucination, data leakage, misuse, etc.—as categories).
  3. Run TEVV activities so claims match observed behavior under varied conditions.
  4. Document outcomes (AIRC Playbook suggests actions and documentation practices).

Not legal advice. Confirm current NIST pages; AIRC notes AI RMF 1.0 is being revised.

Everyday example

A building code gives design principles; inspectors still verify the finished structure. RMF + TEVV is the principles + verification habit for AI.

Try it

Pick one AI feature. Write one Map risk, one Measure test idea, and one Manage control—in your own words.

Myths

⚠️ Myth: “We follow NIST” means we are compliant with every law.
✓ Reality: RMF is voluntary risk management; legal duties come from statutes/agencies/contracts.
⚠️ Myth: TEVV is only pre-launch.
✓ Reality: AIRC framing is ongoing trustworthiness under changing conditions.

Sources