Tell apart the NIST AI RMF from its Generative AI profile

Flashcard·Easy·4.0 · 0·~30s·Asked atCerebras Neo4j Shopify

Attempt it

The AI RMF 1.0 (January 2023) is the umbrella framework, four functions (Govern, Map, Measure, Manage) that apply to any AI system, classical ML included. The Generative AI profile (NIST AI 600-1, July 2024) is a companion document that takes those four functions and adds the risks specific to generative systems: confabulation, data leakage from training data, prompt injection, dangerous-content generation, value-chain risks, and so on. An LLM product touches both. You inherit the RMF structure, then you actually apply the GenAI profile because that is where the LLM-specific risks and controls are listed. Citing only the umbrella RMF in a customer questionnaire is a tell that the team has not done the LLM-specific work.

Your answer

NIST published two documents teams confuse with each other. The **AI Risk Management Framework 1.0** came out in January 2023. It is the umbrella framework: four functions called Govern, Map, Measure, and Manage, applicable to any AI system. It is technology-agnostic, the same structure covers a classical fraud-detection model, a recommendation system, and a large language model. The **Generative AI profile** (NIST AI 600-1) came out in July 2024. It is a companion document. It does not replace the RMF. Instead, it takes the four functions and overlays the risks specific to generative systems: confabulation (hallucination), training-data leakage, prompt injection, dangerous-content generation, value-chain risks (training data licensing, foundation-model dependencies), CBRN risks at the high end. An LLM product is subject to both. You inherit the RMF's structure, the four functions, the Govern/Map/Measure/Manage cycle, and then you actually apply the GenAI profile because that is where the LLM-specific controls live. The tell that someone has not done the work: they cite the umbrella RMF and never mention the GenAI profile. That means they have the framework structure but have not engaged with the LLM-specific risks.

**Two documents, both apply, in this order.** The **AI RMF 1.0** is the foundational document. Four functions: Govern (policies, roles, accountability), Map (context, stakeholders, intended uses), Measure (testing, monitoring, metrics), Manage (treatment, monitoring, response). It is intentionally technology-agnostic, a single page might describe controls that apply equally to a fraud-detection model and a chatbot. The **Generative AI profile (NIST AI 600-1)** is the LLM-specific overlay. It enumerates the risks particular to generative systems, confabulation, data leakage, environmental impact, dangerous content, value-chain dependencies, intellectual property, prompt injection, information integrity, and maps each to specific controls under the four RMF functions. It does not replace the RMF; it tells you what concretely to do within the RMF's structure when the system happens to be generative. An LLM product needs both. The RMF gives you the governance scaffold; the GenAI profile gives you the LLM-specific risk register and control library. A vendor questionnaire that names only the RMF without referencing the GenAI profile signals that the team has the structure but has not done the LLM-specific control mapping, and that is the substantive work the buyer cares about. The interview signal is knowing both documents exist, knowing the RMF is the umbrella and the GenAI profile is the LLM specifics, and recognising that 'we use the NIST framework' is a half-answer without the profile name attached.

TL;DR

AI RMF 1.0 is the umbrella four-function framework for any AI system; the GenAI profile (NIST AI 600-1) adds the LLM-specific risks like injection, confabulation, and data leakage on top.

Memory aid

Easy to grasp

Imagine a general building code that covers every type of structure, houses, schools, hospitals. Then imagine a supplementary code that only applies to hospitals, listing risks unique to hospitals like infection control and oxygen handling. A hospital follows both. The AI RMF is the general code; the Generative AI profile is the hospital-specific supplement. If someone tells you their hospital follows only the general code, you know they have not done the hospital-specific safety work.

Key concepts

Safety and Guardrails

Concept explanation~2 min read

Everything you need to truly understand this topic: intuition, mechanics, step by step explanation, code, formulas, and worked example. Click to expand.

Compliance conversations about LLMs reference 'the NIST framework' constantly, and the phrase hides a meaningful ambiguity. There are two NIST documents involved: a broad framework and a specific profile that overlays the broad framework with LLM-relevant risks. Conflating them is the common mistake.

Knowing the structure matters because the documents do different work. The framework gives you the governance scaffold; the profile gives you the risk register. A vendor or compliance team that names only one is missing half the picture.

AI RMF 1.0: the umbrella framework

The AI Risk Management Framework 1.0 was published by NIST in January 2023 after a multi-year consultative process. The document is intentionally technology-agnostic, it does not name any specific AI architecture, model class, or vendor. The same framework applies to a classical fraud-detection model, a recommendation system, and a generative LLM.

The core structure is four functions arranged as a cycle. Govern is the foundational function: roles, accountability, policies, culture. Map is the contextualisation function: identify the AI system's purpose, users, stakeholders, and operational environment. Measure is the testing and monitoring function: define metrics, run evaluations, monitor production. Manage is the response function: prioritise risks, treat them, monitor treatment effectiveness.

The deliberate generality is the point. NIST wanted a document that would survive multiple AI technology generations without being rewritten every two years. The cost is that the RMF alone tells you almost nothing about what to do when your AI is an LLM. You need the framework structure plus a layer that names the LLM-specific risks.

GenAI profile: the LLM-specific overlay

Using both together: the workflow

Where the NIST documents sit in the broader regulatory landscape

Failure modes to avoid

Situations where this technique stops working.

2–4 min · Everything important, quickly.

Aspect	AI RMF 1.0	GenAI Profile (NIST AI 600-1)
Published	January 2023	July 2024
Scope	Any AI system, including classical ML	Generative AI specifically
Structure	Four functions: Govern, Map, Measure, Manage	Risk categories + control mapping into the four functions
Names risks like prompt injection	No	Yes
Applies to an LLM product	Yes, as the umbrella structure	Yes, as the LLM-specific control layer

Real products, models, and research that use this idea.

Anthropic's Responsible Disclosure framework references the GenAI profile risks (confabulation, dangerous content, CBRN uplift) explicitly in their public safety documentation.
OpenAI's enterprise customer trust portal references AI RMF 1.0 alignment and breaks out GenAI-profile-specific controls in the appendix.

What an interviewer would ask next. Try answering before peeking at the approach.

QHow does the GenAI profile relate to ISO 42001 and the EU AI Act?

Talk about ISO 42001 as a management-system standard (analogous to ISO 27001 for security), the EU AI Act as binding regulation in the EU with risk-tier obligations, and the NIST documents as voluntary guidance widely adopted in US procurement. Most enterprise programmes map all three to a single internal controls library.

1 more follow-up an interviewer would ask next. Sign in to reveal them.

Red flags & common mistakes

The phrases that signal junior thinking. Click to expand.

Most common mistake

Citing only the AI RMF 1.0 in a compliance answer for an LLM product. The GenAI profile is where the LLM-specific risks and controls actually live.

60 second bullets to scan on the way to the call.

Name the AI RMF 1.0 four functions in order
Name at least five risk categories from the GenAI profile

Primary sources. Browse if you want the original framing.