AI Boss Tools | Diagnostic 10 • Back to the Hub
The NIST AI Risk Management Framework organises trustworthy AI around four functions: Govern, Map, Measure, and Manage. Regulators, insurers, and enterprise customers increasingly expect all four. Twelve questions score your organisation against them and show which function needs work first.
NIST published the AI Risk Management Framework in January 2023, and it has become the common language of AI governance far beyond the United States. Govern covers accountability, policy, and culture. Map means knowing what AI you have and what it touches. Measure means testing and monitoring it. Manage means acting on what you find.
The framework itself is voluntary, but the pressure to follow it keeps growing. The EU AI Act imposes binding duties on organisations that deploy AI, and IBM's 2025 breach study found that 63 percent of organisations still have no AI governance policy of any kind.
Each function gets three questions. Your report ranks all four and gives each one a concrete next step.
The Govern, Map, Measure, Manage structure this check follows, from the US National Institute of Standards and Technology.
The binding regulatory backdrop: risk-based obligations for AI providers and deployers, phasing in from February 2025.
The cost of the gap: 63 percent of organisations have no AI governance policy, and ungoverned AI use adds real breach cost.
A score for every dimension, a median benchmark to compare against, a specific next step for each dimension, and a one-pager sized for a board pack. Your name and email open it, and there is no charge.