Map context, intended use and potential impacts (Map)
Under NIST AI RMF, MAP function
Source-linked
Open official source
What does it require?
Map establishes the context: intended purposes, users, deployment settings, legal requirements, risk categorisation, benefits and costs, and impacts on individuals, groups, communities and society.
Practical action
Produce a system card or context document before development starts.
Who does it apply to?
Voluntary; any organisation adopting the framework.
- Sectors
- Cross-sector / all sectors
Evidence examples
- AI system context and impact document (document)
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| ISO/IEC 42001:2023 | Clause 6.1.4 AI system impact assessment | Original editorial mapping. | high |
Similar obligations in other instruments
- Carry out a fundamental rights impact assessment before deployment — EU AI Act, European Union
- Significant Data Fiduciaries must appoint a DPO and run impact assessments and audits — India DPDP Act, India
- Carry out a data protection impact assessment for high-risk AI processing — ICO AI guidance, United Kingdom
- Deployers must complete impact assessments for high-risk AI — Colorado AI Act, Colorado (United States)
- Conduct a data protection impact assessment for high-risk processing using new technologies — UAE PDPL, United Arab Emirates
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.