AI Risk Management Framework (AIRMF) App®

Artificial Intelligence (AI)
Security
Software Engineering
Machine Learning (ML)
Automation

The U.S. National Institute of Standards and Technology (NIST) released the NIST AI Risk Management Framework (AIRMF) in December, 2022. The NIST Al RMF is the most significant Al standard and guideline issued by the United States. It is anticipated to be a regulatory requirement similar to the EU Artificial Intelligence Act. Artificial Intelligence (AI) capabilities are now integrated into nearly all aspects of life, work, and society. Al systems can be used for proactive preventive, predictive, and preemptive decision making and problem solving. However, decision making and problem solving risks can emerge involving trust, privacy, accuracy, explainability, reliability, robustness, safety, security, and bias risks. NIST explains the purpose of the Al RMF is to: ". . improve understanding of and to help organizations manage both enterprise and societal risks related to the development, deployment, and use of Al systems. Adopting the AI RMF can assist organizations, industries, and society to understand and determine their acceptable levels of risk." [i]"Al Risk Management Framework: Initial Draft: Part 1, NIST, 2022. Objectives: This is a research and development project. Fall term is a research project to evaluate the current state of Al Risk Management Frameworks in EU, US, Australia, and New Zealand. Winter and Spring terms are an app development project. 3 key questions will be addressed in the app: 1: What standards to address AI assurance & adherence; 2: How to address AI assurance & auditing; 3: Who can conduct AI assurance & auditing to the requisite level of risk appetite? The following objectives and deliverables were met for each term: Fall 2022: • Attend NIST AI RMF workshop #2 - October 18-19, 2022. • Research risk management frameworks, such as ISO 31000, NIST 800- 37, AI RMF Playbook, Taxonomy of Al Risk, etc. • Conduct review of NIST AIRMF industry comments. • One research paper (2,000 words): • Risk Management Frameworks - What are they? Why are they important? Why are they critical to Al? What is current state of the art? • Identify customer needs, information, and functionality. Winter 2023: • Architect app. • Review prototype software options. • Design app functionality based on Q+E's trademark: Proactive, Preventive, Predictive, Predictive®. • Design prototype Al using Flutter/Dart for Android and IOS. • ListAPI's. Spring 2023: • Become Certified Enterprise Risk Management® professional. • Develop MVP software app - iteration #2. • Develop backend (Google Firebase). • Present results to EECS internship symposium. Project Status: Masters degree project at Georgia Tech - Major: AI Co-authored the books Trust Me: AI Risk Management and Trust Me: ISO 42001. Presented R&D results at the ISC2 Security Congress 2023. Company Sponsor: Quality Plus Engineering (Q+E) authored the best selling ISO 31000: Enterprise Risk Management book. Al 5 star reviews and ratings on Amazon. See figure to the right. O+E is the only company certified by the U.S. Department of Homeland Security for Critical Infrastructure Protection: Forensics, Assurance, Analytics®.

0 Lifts 

Artifacts

Name Description
AI Risk Management Framework Overview - NIST In collaboration with the private and public sectors, NIST has developed a framework to better manage risks to individuals, organizations, and society associated with artificial intelligence (AI). The NIST AI Risk Management Framework (AI RMF) is intended for voluntary use and to improve the ability to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.   Link
NIST AI RMF Playbook The Playbook provides suggested actions for achieving the outcomes laid out in the AI Risk Management Framework (AI RMF) Core (Tables 1 – 4 in AI RMF 1.0). Suggestions are aligned to each sub-category within the four AI RMF functions (Govern, Map, Measure, Manage). The Playbook is neither a checklist nor set of steps to be followed in its entirety. Playbook suggestions are voluntary. Organizations may utilize this information by borrowing as many – or as few – suggestions as apply to their industry use case or interests.   Link
AI RMF App published on App Store The app will be updated   Link
Feedback