CSOAI
Initializing...
Free forever · No credit card
CSOAI
Initializing...
NIST AI RMF + SP 800-218 kit — £999 one-time + £199/mo monitoring (optional)
The NIST AI Risk Management Framework is the US standard for responsible AI. Our kit turns Govern, Map, Measure, and Manage into worksheets, metrics, and an auditor-ready attestation.
Why NIST AI RMF matters in 2026
NIST AI RMF Kit
£999one-time
GOVERN/MAP/MEASURE/MANAGE worksheets, risk register, metrics dashboard, and one signed attestation.
Buy — £999Audit-Prep Bundle
£4,950one-time
Kit + 2-day engagement + red-team exercise + 90-day support.
Buy Audit-Prep — £4,950Enterprise
£1,499/month
Continuous risk measurement, quarterly workbook refresh, and unlimited attestations.
Talk sales — £1,499/moGOVERN — AI risk culture
Board accountability, risk tolerance statements, roles and responsibilities, and integration with enterprise risk management and legal review.
MAP — context and risks
AI system categorisation, intended use, foreseeable misuse, stakeholder impact, and mapping of AI-specific risks to business processes.
MEASURE — quantified risk
Pre-deployment validation, ongoing monitoring metrics, bias tests, robustness checks, red-teaming results, and third-party evaluation evidence.
MANAGE — respond and recover
Risk response planning, incident response playbooks, human oversight procedures, and continuous improvement workflows.
The NIST AI Risk Management Framework (AI RMF 1.0) is a voluntary framework for managing risks from AI systems. It is organised around four functions: Govern, Map, Measure, and Manage.
No, it is voluntary. However, US federal agencies and contractors are directed to align with it under Executive Order 14110 and OMB M-24-10. Many enterprise buyers also request NIST alignment.
NIST CSF covers organisational cybersecurity. SP 800-218 covers secure software development. AI RMF covers AI-specific risks. The three frameworks complement each other and share common governance language.
Completed worksheets for each RMF function, risk registers, measurement results, test logs, incident response playbooks, and an Ed25519-signed attestation of alignment.
No. NIST AI RMF is risk-management focused and voluntary. The EU AI Act is a legal obligation with specific conformity requirements. The two align well and can share evidence, but one does not substitute for the other.
Need a certifiable AI management system?
See the ISO 42001 AIMS kit →MEOK AI Labs · CSOAI LTD · UK Companies House 16939677