Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST AI Risk Management Framework (AI RMF)

NIST AI Risk Management Framework (AI RMF)

The Artificial Intelligence Risk Management Framework (AI RMF) is designed in collaboration with private and public sectors. It is a practical guide to enable individuals and organizations to manage risks posed by generative AI in a way that aligns with their goals and objectives. 

NIST AI RMF is a voluntary framework developed to help users ensure transparency and trustworthiness into the end to end process of AI usage that includes its designing, developing, and evaluation. It aims to facilitate the use of AI in a way that emphasizes human centricity, social responsibility, and sustainability. 

The framework covers these areas:

  1. Framing risk: Understanding and addressing the impacts, challenges, and harms caused by risks.
  2. Audience: Involves the perspectives and impacts from a broad perspective of actors throughout its lifecycle. 
  3. AI risks and trustworthiness: Ensure that AI systems are trustworthy by being responsive to all interested parties.
  4. Effectiveness: Describes how users can benefit from the framework.
  5. RMF core: Outlines the actions and outcomes to promote the collaboration, understanding, and other activities that help to develop trustworthy AI systems though these functions – govern, map, measure, and manage. 
  6. Profiles: These are implementation of functions, categories, and subcategories for applications based on the specific requirement, risk tolerance level, and resources of the user.

Additional reading

How to Make Your Existing Gmail Account HIPAA Compliant

If there’s one group of people who are constantly under attack from phishers, it’s healthcare providers. Doctors, nurses, or employees who use Gmail to share sensitive data are more likely than others to have their sensitive data compromised.  To protect your business from being non-compliant with federal HIPAA (Health Insurance Portability and Accountability Act) law,…

Breaking Down NIST 800-171 Controls: The Full List of Security Requirements

As long as small and mid-sized businesses can demonstrate robust security measures, the U.S. Department of Defense is more than willing to outsource innovation, ideas, and services to them. You don’t need to be a large enterprise to win federal contracts—what matters is proving that you can effectively safeguard sensitive government information from potential threats….

Understanding VAPT: Audit Types, Process, and Benefits

In late 2019, US government agencies were grappling with what unfolded to be one of the most sophisticated hacking campaigns – Russian intelligence injected a trojan virus into their network management system provided by a third party. The exploiters briefly managed to gain remote access to sensitive data because the US agencies trusted untested software….

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.