Guides to applying the NIST AI RMF where requirements differ by sector: the Treasury financial services adaptation, critical infrastructure, hiring and HR technology, state and local government, and AI vendors answering enterprise customers.
How banks, insurers, investment firms and their vendors apply the NIST AI RMF through the Financial Services AI Risk Management Framework released with Treasury in 2026: who built it, its 230 control objectives, adoption stages, components and how to obtain it.
How critical infrastructure operators use the NIST AI RMF for AI in IT, OT and industrial control systems: NIST's critical infrastructure profile in development, Montana's risk policy requirement, and the security expectations in America's AI Action Plan.
How employers and HR technology vendors use the NIST AI RMF for AI in hiring: the hiring profile NIST gives as an example, the DOL-funded inclusive hiring framework listed by NIST, Workday's approach, and the Colorado and Texas rules that apply to employment decisions.
How cities, counties and state agencies apply the NIST AI RMF, using San Jose's published self-assessment as a worked example, and the Texas rules that apply specifically to governmental entities using AI.
How AI vendors and SaaS companies use the NIST AI RMF to answer enterprise customers' AI risk reviews: Workday's documented approach, the procurement evidence buyers ask for under the Generative AI Profile, contract terms, and residual risk disclosure to acquirers.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.