United States AI rules mapped to NIST AI RMF
Each row is one legal duty recorded for United States and the function of NIST AI Risk Management Framework 1.0 it corresponds to. Use it to find which duties your existing evidence already reaches.
Coverage of this crosswalk
2 of 7 recorded United States duties carry a mapping
The denominator is the number of duties this platform has broken out for United States, not the number of duties the law contains. Unmapped duties are ones no reviewer has crosswalked yet, not ones the standard fails to address.
The mapping
| Legal duty | Binding? | NIST AI RMF function | Why they correspond | Confidence |
|---|---|---|---|---|
| Apply minimum risk-management practices to high-impact AI OMB M-25-21, Section 4 | Legal requirement | MAP, MEASURE, MANAGE | The memo is aligned with the AI RMF vocabulary. | medium |
| Publish an annual AI use-case inventory OMB M-25-21, Section 3 | Legal requirement | GOVERN 1.6 | Inventory of AI systems. | medium |
What a mapping means
The duty and the function ask for overlapping work, so evidence produced for one is likely to be reusable for the other. Confidence records how direct that overlap is.
What it does not mean
NIST AI RMF adoption does not discharge a legal duty and carries no force in United States. A mapped row still has to be complied with on the statute's own terms.
Instruments in this crosswalk
- OMB M-25-21 — United States
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.
Frequently asked questions
- Does NIST AI RMF adoption satisfy United States AI rules?
- No. NIST AI RMF is a voluntary framework and carries no legal force in United States. This crosswalk records that 2 of the 7 duties tracked here have a corresponding clause, which means the evidence may be reusable, not that the duty is discharged.
- How many United States AI duties map to NIST AI RMF?
- 2 of 7 duties recorded for United States carry a mapping to NIST AI Risk Management Framework 1.0.