Match the four NIST AI RMF core functions to what they actually demand

**NIST AI RMF** (Risk Management Framework) is the US government's reference framework for managing AI risk across the system lifecycle. Its core has four named functions, each with its own job. **Govern.** The policies, accountability, roles, and culture that make AI risk management an organisational activity rather than a one-engineer project. Govern answers 'who owns AI risk, how do decisions escalate, what is the chain of authority, what is the documentation expected.' **Map.** The inventory and contextual scoping work. Map answers 'what AI systems do we have, what are they intended to do, who is affected when they go wrong, what is the operational context.' Without Map, the rest of the framework has nothing concrete to apply to. **Measure.** The evaluation work, both quantitative and qualitative. Measure answers 'how risky are these systems on the dimensions that matter, bias, accuracy, robustness, drift, fairness, safety.' This is where benchmarks, red-team campaigns, and live monitoring metrics live. **Manage.** The action layer. Manage answers 'given what we know from Measure, what do we do, prioritise, treat, monitor, retire systems, respond to incidents.' This is where the rubber meets the road. The four functions are concurrent, not sequential. They cycle continuously as systems evolve and as the field learns.

**NIST AI Risk Management Framework, the four core functions in their actual operational role.** **Govern is upstream and organisational.** Policies, accountability, roles, culture. Govern is what makes AI risk a managed organisational concern rather than an artifact of individual engineering choices. It includes risk-management policy documents, accountability assignments (who owns AI risk at the executive level, who owns it per product line, who reviews safety-critical decisions), training and culture, and the escalation paths that fire when Measure surfaces something serious. **Map is the contextual scoping work.** Map produces an inventory of AI systems with their intended use, deployment context, affected populations, and risk profile. Without Map, the rest of the framework has nothing concrete to apply to, you cannot measure risk on systems you have not inventoried, and you cannot manage what is not on the map. This is where the EU AI Act's high-risk classifications and the NIST Generative AI Profile's use-case categories get matched to your specific systems. **Measure is the quantitative and qualitative evaluation layer.** Bias tests across protected attributes, accuracy and robustness benchmarks, drift monitoring, red-team campaigns, AILuminate hazard grading, jailbreak suites via PyRIT or Garak, fairness metrics, explainability assessments, and operational telemetry. The output is evidence, numbers and structured findings, that Manage acts on. **Manage is the action and monitoring loop.** Prioritise risks by impact and likelihood, treat them by mitigation (retraining, guardrail update, rollback, retirement, scope restriction), monitor for recurrence, respond to incidents with structured incident review, and feed lessons back into Govern (policy updates) and Map (re-scoping). The four functions run concurrently and cycle continuously. A mature programme has all four operating at all times across the AI system portfolio.