Governance, risk & compliance

NIST AI Risk Management Framework 1.0 + GenAI Profile (NIST-AI-600-1)

Voluntary, vendor-neutral framework for governing, mapping, measuring, and managing risks of AI systems across their lifecycle.

The de-facto North American baseline for AI governance. Two tiers are provided: Essentials (19 category-level outcomes, suited to smaller organizations getting started) and Comprehensive (all 72 subcategories of the AI RMF Core).

The Generative AI Profile guidance is embedded in the question help text.

Assessment tiers & levels Lavawall supports

Lavawall assesses NIST AI Risk Management Framework at every level below, so you can start where you are and step up as your program matures.

How Lavawall® helps you get to NIST AI Risk Management Framework compliance

Most of NIST AI Risk Management Framework comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to NIST AI Risk Management Framework, and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against NIST AI Risk Management Framework in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Training courses for NIST AI RMF

The Lavawall® training catalogue has 3 courses that cover it. Assign them to the people they apply to and keep the completion records with the rest of your compliance evidence.

• AI Governance & the NIST AI Risk Management Framework (63 min)
• AI Governance Micro-Course: ISO/IEC 42001 in a Nutshell (47 min)
• AI Governance Micro-Course: The EU AI Act Essentials (37 min)

See these courses in the training catalogue →

Related

Lavawall® supports NIST AI Risk Management Framework as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.