# Prioritise, respond to and monitor AI risks (Manage)

- **Record type**: Obligation
- **Instrument**: NIST AI Risk Management Framework (AI RMF 1.0) and Generative AI Profile
- **Jurisdiction**: United States
- **Category**: risk_management
- **Binding**: No
- **Provision**: MANAGE function

## In brief

Prioritise, respond to and monitor AI risks (Manage) is a voluntary measure under the NIST AI RMF in the United States (MANAGE function). Manage allocates resources to mapped and measured risks, plans responses including decommissioning, manages third-party risks, and documents post-deployment monitoring, incident response and communication. The record carries 1 evidence example and mappings to 1 framework.

## What the duty requires

Manage allocates resources to mapped and measured risks, plans responses including decommissioning, manages third-party risks, and documents post-deployment monitoring, incident response and communication.

## What an organisation does about it

Maintain a risk-treatment plan and an incident and monitoring log per system.

## Controls that meet this duty

- AI risk assessment and lifecycle risk register (satisfies): https://aipolicytracker.org/controls/ai-risk-assessment
- AI incident management and regulatory reporting (supports): https://aipolicytracker.org/controls/ai-incident-management-and-reporting
- Vendor and third-party AI due diligence (supports): https://aipolicytracker.org/controls/third-party-ai-due-diligence

## Parent instrument

- NIST AI Risk Management Framework (AI RMF 1.0) and Generative AI Profile
  - Record: https://aipolicytracker.org/policies/us-nist-ai-rmf
  - Context file: https://aipolicytracker.org/policies/us-nist-ai-rmf.md

## Provenance

- **Permanent id**: AIPT-OBL-0115 (https://aipolicytracker.org/id/AIPT-OBL-0115; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/obligations/us-nist-ai-rmf-manage
- **Official source**: https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf
- **Provision**: MANAGE function
- **Review status**: verified
- **Confidence**: high
- **Facts last confirmed**: 2026-09-26
- **Confirmed by**: Bhaskar Bhatt (see https://aipolicytracker.org/reviewers)
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Prioritise, respond to and monitor AI risks (Manage) (NIST AI RMF)" [AIPT-OBL-0115, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-OBL-0115 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.