Cyber Cultura course
NIST AI RMF: AI Risk Management
Govern, Map, Measure and Manage, applied to your use case.
Prepares participants to implement the NIST AI Risk Management Framework (AI RMF 1.0), operationalizing the GOVERN, MAP, MEASURE and MANAGE functions and the characteristics of trustworthy AI across the lifecycle.
- Workload
- 5 hours
- Format
- Online or in-company
- Investment
- On request
We’ll reply with dates, format and investment.
Who it’s for
- AI risk and governance professionals.
- Companies that serve customers or parent companies that adopt NIST.
- Technical teams that need to measure and document AI risks.
What you’ll develop
- Understand the functions and subcategories of the AI RMF and how to apply them in practice.
- Build profiles by use case and risk level.
- Define and apply sociotechnical metrics: validity, safety, bias, explainability and privacy.
- Establish controls, processes and evidence for ongoing risk management.
- Integrate the AI RMF with ISO/IEC 42001, ISO/IEC 23894 and corporate governance.
Syllabus
5 hours
01NIST AI RMF fundamentals
- Objectives, scope and concepts of trustworthy AI
- The role of the AI RMF Playbook and of profiles
02GOVERN: governance
- Culture, roles and responsibilities, policies and processes
- Third-party, procurement and contract management
- Transparency, documentation, accountability and reporting channels
03MAP: mapping
- Contextualizing the AI system: purpose, interested parties and environment
- Identifying risks and social, ethical and regulatory side effects
- Profiles: definition by scenario, risk and required safeguards
04MEASURE: measurement
- Defining metrics and evaluation methods, technical and organizational
- Validity and reliability, safety and resilience, privacy, fairness and bias, explainability
- Limitations, uncertainties, documentation and reproducibility
05MANAGE: management
- Risk treatment, action plans and improvement cycles
- Continuous monitoring, drift detection, change management and incident management
- Acceptance and decommissioning criteria and response plans
06Profiles and integration
- Building profiles by business process
- Practical mapping with ISO/IEC 42001 (AIMS), 23894 (risk), 27001 and 27701
- Artifact examples: AI system card, risk matrix, monitoring plan and decision log
What the course includes
- Artifact examples
For your team
This course is also offered in-company, on-site or remote, as a private class for your company.
Cyber Cultura course
NIST AI RMF: AI Risk Management
We’ll reply with dates, format and investment.
cyber@cyberconsulting.com.br