Preparing for the Future: NIST AI RMF in the Age of Advanced AI

Contributors

Anas Baig

Product Marketing Manager at Securiti

Adeel Hasan

Sr. Data Privacy Analyst at Securiti

CIPM, CIPP/Canada

Muhammad Ismail

Assoc. Data Privacy Analyst at Securiti

Published September 12, 2024

Listen to the content

In a rapidly evolving AI landscape, the National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework (AI RMF) provides a robust guideline for organizations struggling to navigate AI complexities and mitigate the risks associated with AI technologies.

The AI market is projected to reach US$184.00bn in 2024 and show an annual growth rate (CAGR 2024-2030) of 28.46%, resulting in a market volume of US$826.70bn by 2030. This figure demonstrates the sheer adoption of AI across industries and the need to assess potential risks and ethical considerations associated with AI use.

With the growing integration of AI systems across several industries, it is crucial to have a robust framework that can be utilized across geographies. The future of NIST AI RMF promises significant improvements, such as a dedicated focus on generative AI, the integration of maturity models, and alignment with international standards such as the EU AI Act and Japan AI Guidelines for Business.

These updates aim to maintain ethical, transparent, and socially responsible AI development by taking a holistic approach to AI risk management. This guide explores the projected future of NIST AI RMF and how it may affect AI governance going forward.

Deep Dive into the Future of NIST AI RMF

In response to the increasing complexity and integration of AI technologies across several industries, the NIST AI RMF is likely to undergo substantial development. These include:

Generative AI Profile

NIST has released a draft Generative AI Profile to address particular risks associated with generative AI (GenAI). This profile offers recommendations for how businesses can successfully manage these risks while considering the unique challenges that GenAI systems provide. The profile was developed with input from a large public working group and outlines 12 risk areas and several recommended actions​​. These risk areas are:

  1. Chemical, Biological, Radiological, or Nuclear (CBRN) Information or Capabilities
  2. Confabulation
  3. Dangerous, Violent, or Harmful Content
  4. Data Privacy
  5. Environmental Impacts
  6. Human-AI Configuration
  7. Information Integrity
  8. Information Security
  9. Intellectual Property
  10. Obscene, Degrading, and/or Abusive Content
  11. Harmful Bias and Homogenization
  12. Value Chain and Component Integration.

Maturity Model Integration

Integrating maturity models for AI risk management with the NIST AI RMF is becoming increasingly important. These models provide a structured approach for assessing advancement and determining areas where organizations may improve their AI governance procedures. Instead of only acting as a compliance checklist, this integration ensures that the NIST AI RMF stays applicable and useful for ongoing development.

International Alignment

NIST is integrating the AI RMF with internationally recognized guidelines and standards, such as the Japan AI Guidelines for Business and the EU AI Act, to enhance global uniformity in AI risk management. This alignment will facilitate international organizations' collaboration and ensure they can follow a unified set of best practices.

Continuous Updates and Community Engagement

The AI RMF is intended to be a dynamic document that will receive updates and be regularly reviewed in response to input from the AI community. To ensure the framework is current and useful in tackling new AI concerns, NIST has set up procedures for continuing community involvement, including workshops, public comments, and coordination with different stakeholders.

Emphasis on Trustworthiness and Responsible AI

The framework continues to prioritize AI's safe, valid, reliable, accountable, and transparent use. It encourages organizations to take a sociotechnical stance, considering both AI's social and technological implications. This strategy seeks to ensure that AI technologies are created and used transparently, without bias, and socially responsibly.

These initiatives highlight NIST's commitment to providing a robust and flexible framework that can help organizations manage AI risks in an ethical and efficient manner as the technological environment evolves. This commitment is explicitly mentioned in the NIST AI RMF document:

“The Framework and supporting resources will be updated, expanded, and improved based on evolving technology, the standards landscape around the world, and AI community experience and feedback. NIST will continue to align the AI RMF and related guidance with applicable international standards, guidelines, and practices. As the AI RMF is put into use, additional lessons will be learned to inform future updates and additional resources.”

The Role of Stakeholders in Shaping the Future of NIST AI RMF

Stakeholders are essential to the NIST AI RMF's development because they bring a variety of viewpoints and levels of experience to the table. The main methods that stakeholders have an impact on the framework are as follows:

Public and Private Sector Collaboration

The public and commercial sectors have jointly contributed to developing the NIST AI RMF. Contributions from stakeholders in academia, government, technology corporations, and civil society ensure that the framework covers the wide range of concerns related to artificial intelligence. Together, these stakeholders help create a comprehensive, well-balanced framework applicable to a wide range of industries and applications.

Public Feedback and Workshops

NIST often solicits public input via workshops, public comment periods, and requests for information. Stakeholders may use these venues to share their experiences, express their concerns, and suggest changes. The flexible process of integrating public feedback ensures that the AI RMF remains responsive to emergent challenges and stakeholder requirements.

Working Groups and Advisory Panels

Specialized working groups and advisory panels, including experts from diverse sectors, provide specific suggestions and technical assistance. These groups emphasize particular elements of AI risk management, such as GenAI or ethical issues, ensuring the framework fully covers all essential and evolving areas of concern.

International Cooperation

Stakeholders also play a significant role in aligning the AI RMF with international standards and best practices. By partnering with international agencies and adopting global viewpoints, the NIST AI RMF can be aligned with existing guidelines, easing its adoption by multinational corporations and providing consistency in AI governance across geographies.

How Securiti Can Help

Securiti’s DataAI Command Platform enables organizations to comply with the NIST AI RMF by securing the organization’s data, enabling organizations to maximize data value, and fulfilling an organization’s obligations around data security, data privacy, data governance, and compliance.

Organizations can overcome hyperscale data environment challenges by delivering unified intelligence and controls for data across public clouds, data clouds, and SaaS, enabling organizations to swiftly comply with privacy, security, governance, and compliance requirements.

Request a demo to witness Securiti in action.

Analyze this article with AI

Prompts open in third-party AI tools.
Join Our Newsletter

Get all the latest information, law updates and more delivered to your inbox



More Stories that May Interest You
Videos
View More
Rehan Jalil, Veeam on Agent Commander : theCUBE + NYSE Wired: Cyber Security Leaders
Following Veeam’s acquisition of Securiti, the launch of Agent Commander marks an important step toward helping enterprises adopt AI agents with greater confidence. In...
View More
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...

Spotlight Talks

Spotlight 1:02:06
Consent by proxy: When AI agents start deciding for us
Watch Now View
Spotlight 1:00:41
Future-Proofing for the Privacy Professional
Watch Now View
Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight
Choosing the Right DSPM: An Industry Analyst’s Perspective
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Latest
View More
One Unrevoked Key, 37.5 Million People: What the Coupang data breach reveals about data access
Executive summary In June 2026, South Korea's Personal Information Protection Commission (PIPC) fined Coupang 624.68 billion won (approximately $409 million) which was the largest...
More Tools Does Not Mean Faster or More Accurate Insights View More
More Tools Does Not Mean Faster or More Accurate Insights
An access-review tool flags an account with more privilege than its role needs: routine, filed, forgotten. That same week, a separate scan shows that the same...
[Knowledge Center] The FTC question and the Future of EU-US Cross Border Data Transfers View More
The FTC Question and the Future of EU-US Cross-Border Data Transfers
Explore how FTC independence concerns could affect the EU-US Data Privacy Framework, cross-border data transfers, and enterprise compliance planning.
Data Security Posture Management (DSPM) Best Practices View More
Data Security Posture Management (DSPM) Best Practices
Explore DSPM best practices for discovering sensitive data, reducing exposure, governing access, prioritizing risk, and strengthening enterprise data security.
View More
Green-Light AI, Not Data Exposure
Learn the five critical data-layer controls enterprises need to prevent sensitive data exposure and enable secure, scalable AI agent adoption.
Agentic AI Readiness View More
Agentic AI Readiness: Why Your Enterprise Needs a New Data Security Paradigm
Learn how to secure Agentic AI by discovering sensitive data, mitigating AI risks, and building an enterprise-ready AI security strategy.
The Cloud Storage Bill Nobody Reads View More
The Cloud Storage Bill Nobody Reads
Hidden cloud storage costs add up fast. Learn how redundant, obsolete, and trivial data drives unnecessary spend, expands risk, and why automated data minimization...
"The Algorithm Did It" Is Now Dead in Court View More
“The Algorithm Did It” Is Now Dead in Court
Discover why organizations are now liable for AI-generated content and how ROT data minimization, AI governance, and Agent Commander reduce legal, security, and compliance...
View More
Take the Data Risk Out of AI
Learn how to prepare enterprise data for safe Gemini Enterprise adoption with upstream governance, sensitive data discovery, and pre-index policy controls.
View More
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
What's
New