NIST AI RMF Manage Function

NIST AI 100-1 (AI RMF 1.0, January 2023) gives MANAGE as one of the four functions of its Core. Section 5.4 of NIST AI 100-1 starts with this text:

NIST AI 100-1, Section 5.4: The MANAGE function entails allocating risk resources to mapped and measured risks on a regular basis and as defined by the GOVERN function. Risk treatment comprises plans to respond to, recover from, and communicate about incidents or events.

In NIST AI 100-1, Table 4 divides MANAGE into four categories (MANAGE 1 to MANAGE 4) and 13 subcategories. Each subcategory is an outcome. The AI RMF is voluntary guidance. It gives outcomes, and it gives no obligation to an organization.

As of October 2026, the NIST page for the AI RMF gives this text: "The AI RMF 1.0 is being revised as part of the White House AI Action Plan." No new version of NIST AI 100-1 is available at this date. Thus, the MANAGE outcomes on this page are from NIST AI 100-1 of January 2023. For the status of the AI RMF, see The framework and its status.

Primary sources

NIST AI 100-1, Artificial Intelligence Risk Management Framework (AI RMF 1.0), January 2023: Section 5.4 and Table 4 for the MANAGE function, and Section 1.2.3 for risk prioritization and residual risk. NIST AI 100-1 (PDF).

How Manage fits into NIST AI RMF 1.0

In NIST AI 100-1, MANAGE uses the output of MAP and MEASURE. The MANAGE 1 category is about AI risks "based on assessments and other analytical output from the MAP and MEASURE functions". Section 5.4 gives the result of the function:

NIST AI 100-1, Section 5.4: After completing the MANAGE function, plans for prioritizing risk and regular monitoring and improvement will be in place. Framework users will have enhanced capacity to manage the risks of deployed AI systems and to allocate risk management resources based on assessed and prioritized risks. It is incumbent on Framework users to continue to apply the MANAGE function to deployed AI systems as methods, contexts, risks, and needs or expectations from relevant AI actors evolve over time.

If there is a governance structure, NIST AI 100-1 writes that the functions "may be performed in any order across the AI lifecycle as deemed to add value by a user of the framework" (the four functions of the Core).

The four MANAGE categories

Table 4 of NIST AI 100-1 gives four categories of MANAGE. Each category below shows the number of its subcategories. The next sections give the text of each category and its subcategories.

MANAGERisk resources for mapped and measured AI risks (NIST AI 100-1, Section 5.4)

MANAGE 1AI risks from MAP and MEASURE are prioritized, responded to, and managed: 4 subcategories

MANAGE 2Strategies to maximize AI benefits and minimize negative impacts: 4 subcategories

MANAGE 3AI risks and benefits from third-party entities: 2 subcategories

MANAGE 4Risk treatments, including response and recovery, and communication plans: 3 subcategories

MANAGE 1

NIST AI 100-1, Table 4: AI risks based on assessments and other analytical output from the MAP and MEASURE functions are prioritized, responded to, and managed.

MANAGE 1.1

NIST AI 100-1, Table 4: A determination is made as to whether the AI system achieves its intended purposes and stated objectives and whether its development or deployment should proceed.

Section 1.2.3 of NIST AI 100-1 (Risk Prioritization) gives a condition to stop development and deployment: "In cases where an AI system presents unacceptable negative risk levels", development and deployment "should cease in a safe manner until risks can be sufficiently managed" (AI risk in NIST AI 100-1).

MANAGE 1.2

NIST AI 100-1, Table 4: Treatment of documented AI risks is prioritized based on impact, likelihood, and available resources or methods.

MANAGE 1.3

NIST AI 100-1, Table 4: Responses to the AI risks deemed high priority, as identified by the MAP function, are developed, planned, and documented. Risk response options can include mitigating, transferring, avoiding, or accepting.

MANAGE 1.3 gives the four responses as examples, and it does not limit the response to these four.

MANAGE 1.4

NIST AI 100-1, Table 4: Negative residual risks (defined as the sum of all unmitigated risks) to both downstream acquirers of AI systems and end users are documented.

MANAGE 1.4 has one outcome: the documentation of these risks. It has no outcome to give the documentation to other persons, and no outcome to accept a residual risk. In Section 1.2.3 of NIST AI 100-1, residual risk is "risk remaining after risk treatment". For more on residual risk, see AI risk in NIST AI 100-1.

MANAGE 2

NIST AI 100-1, Table 4: Strategies to maximize AI benefits and minimize negative impacts are planned, prepared, implemented, documented, and informed by input from relevant AI actors.

MANAGE 2.1

NIST AI 100-1, Table 4: Resources required to manage AI risks are taken into account – along with viable non-AI alternative systems, approaches, or methods – to reduce the magnitude or likelihood of potential impacts.

MANAGE 2.2

NIST AI 100-1, Table 4: Mechanisms are in place and applied to sustain the value of deployed AI systems.

MANAGE 2.3

NIST AI 100-1, Table 4: Procedures are followed to respond to and recover from a previously unknown risk when it is identified.

MANAGE 2.4

NIST AI 100-1, Table 4: Mechanisms are in place and applied, and responsibilities are assigned and understood, to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use.

MANAGE 3

NIST AI 100-1, Table 4: AI risks and benefits from third-party entities are managed.

MANAGE 3.1

NIST AI 100-1, Table 4: AI risks and benefits from third-party resources are regularly monitored, and risk controls are applied and documented.

MANAGE 3.2

NIST AI 100-1, Table 4: Pre-trained models which are used for development are monitored as part of AI system regular monitoring and maintenance.

MANAGE 4

NIST AI 100-1, Table 4: Risk treatments, including response and recovery, and communication plans for the identified and measured AI risks are documented and monitored regularly.

MANAGE 4.1

NIST AI 100-1, Table 4: Post-deployment AI system monitoring plans are implemented, including mechanisms for capturing and evaluating input from users and other relevant AI actors, appeal and override, decommissioning, incident response, recovery, and change management.

MANAGE 4.2

NIST AI 100-1, Table 4: Measurable activities for continual improvements are integrated into AI system updates and include regular engagement with interested parties, including relevant AI actors.

MANAGE 4.3

NIST AI 100-1, Table 4: Incidents and errors are communicated to relevant AI actors, including affected communities. Processes for tracking, responding to, and recovering from incidents and errors are followed and documented.

MANAGE in Modulos

For the MANAGE function, Modulos has Requirements in its two NIST AI RMF Frameworks: MFF-3 for an AI System and OFF-3 for the Organization. Each Requirement has the name of one subcategory, for example Manage 1.3 (the Requirements).

In Modulos, the risk register of an AI System does not record the risk response that the organization selects. It also does not record that the organization accepts a residual risk. The Manage 1.3 Requirements include the documentation of the responses. In MANAGE 1.3, these responses "are developed, planned, and documented". The Manage 1.4 Requirement includes the documentation that MANAGE 1.4 names (the risk register and MANAGE 1.3 and 1.4).

Where to go next

The NIST AI RMF page compares the AI RMF with ISO/IEC 42001 and with the EU AI Act (NIST AI RMF and other frameworks).

NIST AI RMF overview

The AI RMF, its four functions, its profiles, and its effect in law

NIST AI RMF Map function

The five MAP categories and 18 subcategories, with the NIST outcome for each

NIST AI RMF Measure function

The four MEASURE categories and 22 subcategories, with the NIST outcome for each

Operationalizing NIST AI RMF in Modulos

MFF-3 and OFF-3, the Requirement for each subcategory, the sequence of work, and the work that the Frameworks do not hold

Sources of this page

• NIST AI 100-1 (PDF), Artificial Intelligence Risk Management Framework (AI RMF 1.0), January 2023. This page uses these parts of it:
  • Section 1.2.3 (risk prioritization and residual risk).
  • Section 5 (the sequence of the functions).
  • Sections 5.2 and 5.3 (the output of MAP and MEASURE for MANAGE).
  • Section 5.4 and Table 4 (the MANAGE function, its categories, and its subcategories).
• NIST, AI Risk Management Framework page, as of October 2026: AI RMF 1.0 "is being revised as part of the White House AI Action Plan".
• NIST, AI RMF Playbook on the AI Resource Center: voluntary suggested actions for the outcomes of the Core. The Playbook page gives this text: "The Playbook will be updated after the AI RMF is revised."

Disclaimer

This page gives general information only. It is not legal advice.