NIST AI RMF MEASURE

Analyse, benchmark and monitor risk

From clause to evidenceThe chain from NIST AI RMF MEASURE to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: NIST AI RMF, MEASUREClauseNIST AI RMFMEASUREDuty holder: not statedDuty holderNot statedApplies from: no date (Voluntary)Applies fromNo dateVoluntaryArtefact: Eval gates; adversarial red-team suite; metrics per failure modeArtefactEval gatesLayer: Layer 03 Evals & Red Teaming as EvidenceLayerLayer 03Evals & RedTeaming asEvidenceEvidence record: Eval result, Dataset admission record, Test report, Evidence record, Control observation, Test plan, Post-market monitoring plan, Model cardEvidence recordEval result+7 moreSame topic in 29 frameworks (223 clauses): EU AI Act, ISO 42001, NIST AI RMF, TC260 Framework 3.0, ISO 23894, CSA AICM,Korea AI Act and 22 moreAs of 2026-09-19 · illustrative, not a claim of conformity From clause to evidenceThe chain from NIST AI RMF MEASURE to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: NIST AI RMF, MEASUREClauseNIST AI RMF · MEASUREDuty holder: not statedDuty holderNot statedApplies from: no date (Voluntary)Applies fromNo date · VoluntaryArtefact: Eval gates; adversarial red-team suite; metrics per failure modeArtefactEval gatesLayer: Layer 03 Evals & Red Teaming as EvidenceLayerLayer 03Evals & Red Teaming as EvidenceEvidence record: Eval result, Dataset admission record, Test report, Evidence record, Control observation, Test plan, Post-market monitoring plan, Model cardEvidence recordEval result · +7 moreSame topic in 29 frameworks (223 clauses):EU AI Act, ISO 42001, NIST AI RMF, TC260Framework 3.0, ISO 23894 and 24 moreAs of 2026-09-19illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-NISTRMF-MEASURE. Drawn from chapter 08.
Text alternative
Id
AIGE-OBL-NISTRMF-MEASURE
Instrument
NIST AI RMF framework
Compared side by side
NIST AI RMF vs ISO 42001 · NIST AI RMF vs EU AI Act
Clause
MEASURE
Applies from
No date Voluntary · Voluntary (AI RMF 1.0, January 2023)

The artefact that evidences it

Eval gates; adversarial red-team suite; metrics per failure mode.

What this obligation connects toNIST AI RMF MEASURE and its 46 relations: 12 patterns, 5 open controls, 29 same crosswalk topic.DirectColour: stack layer of the pattern or control01 Govern-as-Code03 Evals04 Runtime Controls05 AssuranceNIST AI RMF MEASUREPatterns (12)AI Threat Model · DirectAI Threat ModelAdversarial Red-Team Suite · DirectAdversarial Red-Team SuiteClaims Substantiation Gate · DirectClaims Substantiation GateDecision Notice & Contest Path · DirectDecision Notice & Contest PathDrift & Fairness Monitor · DirectDrift & Fairness MonitorEval Gate in CI · DirectEval Gate in CI+6 more+6 more: Explanation Artefact, Fairness Eval Suite, Model Artefact Integrity, Model Card as Control Evidence, Rights Requests Against Models, Staged Rollout with Rollback CriteriaOpen controls (5)AIGE-CTL-EVAL-009 Evaluation Validity Checks · DirectEvaluation Validity ChecksAIGE-CTL-EVAL-005 Monitoring Integrity · DirectMonitoring IntegrityAIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold · DirectRelease Blocked Below…AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan · DirectSigned Test Report Against…AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation · DirectTest Plan Frozen Before…Same crosswalk topic (29)AI Verify 4.3.1, 4.7.1, 4.2.1, 8.1.1, 8.2.1, 1.1.6, 1.7.2, 1.1.1, 3.4.1, 9.8.1, 5.10.1, 4.1.1, 6.1.1, 5.2.1, 5.9.1, 7.1.1, 7.2.1, 7.8.1, 8.3.1, 8.3.2, 1.4.1, 2.2.1, 1.1.4, 11.1.1 · Core clauseAI VerifyCSA AICM GRC-02, MDS-12, DSP-20, DSP-21, MDS-03, MDS-04, LOG-09, LOG-12, MDS-06, MDS-07, AIS-05, GRC-11, DSP-08, DSP-22, GRC-13, GRC-14, A&A-02, A&A-04, AIS-13 · Core clauseCSA AICMChina AI Labelling Label Art. 4, Label Art. 5 · Core clauseChina AI LabellingChina Deep Synthesis DeepSyn Art. 14, DeepSyn Art. 16, DeepSyn Art. 17, DeepSyn Art. 15, DeepSyn Art. 20 · Core clauseChina Deep SynthesisChina GenAI Measures GenAI Art. 17, GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 12, GenAI Art. 19, GenAI Art. 4(2), GenAI Art. 7(3) · Core clauseChina GenAI MeasuresCoE Convention CoE Art. 16, CoE Art. 14(2), CoE Art. 15(2), CoE Art. 16(2)(g), CoE Art. 10, CoE Art. 11, CoE Art. 13 · Core clauseCoE Convention+23 more+23 more: EU AI Act Art. 9, Art. 3, Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 11, Art. 13, Art. 50, Art. 86, Art. 18, Art. 43, Art. 53(1)(d), Art. 50(2), 50(4), Art. 12, Art. 26(6), Art. 26, Art. 19, Art. 15, Art. 55, Art. 60, Art. 15(3), Art. 42(3), Art. 59, Art. 13(3)(b)(iv)–(v), Art. 47, Art. 48, Art. 40, Art. 57, Art. 58, Art. 61, Annex XI 1(2)(e), Art. 40(2), Art. 95(2)(b), G7 Code G7 Action 3, G7 Action 1, G7 Action 11, GAO AI Accountability 1.6, 2.1, 2.2, 2.4, 2.5, 1.9, 3.5, 1.7, 4.3, 3.7, 3.2, 2.7, 3.8, 2.8, 1.8, GB/T 45654 GB/T 45654 Corpus security, GB/T 45654 Content labelling, GB/T 45654 Security assessment, GDPR Art. 5(1)(c), Art. 25, Art. 9, Arts. 13–14, Art. 30, Art. 32, Art. 5(1)(a), Art. 5, Art. 6, Art. 35, Art. 15(1)(h), Art. 13(2)(f), Art. 22(3), Art. 42, GPAI Code Safety C1, Safety C3, Copyright 1.1–1.5, Transparency 1.1, Transparency 1.2, Safety 3.2, Safety C6, ISO 23894 23894 6.4, 23894 6.5, 23894 6.6, ISO 42001 6.1.2, 6.1.3, 8.2, 8.3, A.6, 6.1.4, A.7, A.7.3, A.4, 7.5, A.8, A.6.2.8, 9.1, A.5.4, A.8.2, 9.2, A.6.2.4, ISO 42006 ISO/IEC 42006, Korea AI Act Art. 34(1)(1), Art. 31, Art. 34(1)(2), Art. 34(1)(5), Art. 32(1), Art. 33, NIST AI RMF MAP 1, MAP 5, MANAGE 1, GOVERN 1.3, MAP 1.5, MANAGE 1.3, MANAGE 1.4, MAP 2, MAP 1.6, MANAGE 4, GOVERN 3.1, OECD AI Principles OECD 1.5(c), OECD 1.3, OECD 1.5(b), OECD 1.4, OECD 1.2, OECD 1.1, OWASP LLM LLM05:2026, LLM01:2026, LLM02:2026, Singapore Agentic Agentic 2.1, Agentic 2.3.3, Agentic 2.3.2, Singapore GenAI GenAI 2, GenAI 3, GenAI 5, GenAI 6, GenAI 9, TC260 Framework 3.0 TC260 2, TC260 Summary table, TC260 5.3.19, TC260 2.1.3, TC260 5.1, TC260 App. 2 II.6, TC260 5.3.6, TC260 3, TC260 5.3.14, UK ATRS ATRS 2.5.2, ATRS 2.4.3, ATRS Tier 1, ATRS 2.2, ATRS 2.4.2, ATRS 2.3.5, UK DUAA UK GDPR Art. 22B, UK GDPR Art. 22C, prEN 18228 prEN 18228, prEN 18229-1 prEN 18229-1, China Algo. Rec. AlgoRec Art. 27, AlgoRec Art. 16, AlgoRec Art. 21, AlgoRec Art. 17, EN 18286 EN 18286, OWASP Agentic ASI05
What this obligation connects toNIST AI RMF MEASURE and its 46 relations: 12 patterns, 5 open controls, 29 same crosswalk topic.DirectColour: stack layer of the pattern or control01 Govern-as-Code03 Evals04 Runtime Controls05 AssurancePatterns (12)AI Threat Model · DirectAI Threat ModelAdversarial Red-Team Suite · DirectAdversarial Red-Team SuiteClaims Substantiation Gate · DirectClaims Substantiation GateDecision Notice & Contest Path · DirectDecision Notice & Contest PathDrift & Fairness Monitor · DirectDrift & Fairness MonitorEval Gate in CI · DirectEval Gate in CI+6 more+6 more: Explanation Artefact, Fairness Eval Suite, Model Artefact Integrity, Model Card as Control Evidence, Rights Requests Against Models, Staged Rollout with Rollback CriteriaOpen controls (5)AIGE-CTL-EVAL-009 Evaluation Validity Checks · DirectEvaluation Validity ChecksAIGE-CTL-EVAL-005 Monitoring Integrity · DirectMonitoring IntegrityAIGE-CTL-ASSURE-002 Release Blocked Below the Eval Threshold · DirectRelease Blocked Below…AIGE-CTL-ASSURE-003 Signed Test Report Against the Plan · DirectSigned Test Report Against…AIGE-CTL-ASSURE-001 Test Plan Frozen Before Evaluation · DirectTest Plan Frozen Before…Same crosswalk topic (29)AI Verify 4.3.1, 4.7.1, 4.2.1, 8.1.1, 8.2.1, 1.1.6, 1.7.2, 1.1.1, 3.4.1, 9.8.1, 5.10.1, 4.1.1, 6.1.1, 5.2.1, 5.9.1, 7.1.1, 7.2.1, 7.8.1, 8.3.1, 8.3.2, 1.4.1, 2.2.1, 1.1.4, 11.1.1 · Core clauseAI VerifyCSA AICM GRC-02, MDS-12, DSP-20, DSP-21, MDS-03, MDS-04, LOG-09, LOG-12, MDS-06, MDS-07, AIS-05, GRC-11, DSP-08, DSP-22, GRC-13, GRC-14, A&A-02, A&A-04, AIS-13 · Core clauseCSA AICMChina AI Labelling Label Art. 4, Label Art. 5 · Core clauseChina AI LabellingChina Deep Synthesis DeepSyn Art. 14, DeepSyn Art. 16, DeepSyn Art. 17, DeepSyn Art. 15, DeepSyn Art. 20 · Core clauseChina Deep SynthesisChina GenAI Measures GenAI Art. 17, GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 12, GenAI Art. 19, GenAI Art. 4(2), GenAI Art. 7(3) · Core clauseChina GenAI MeasuresCoE Convention CoE Art. 16, CoE Art. 14(2), CoE Art. 15(2), CoE Art. 16(2)(g), CoE Art. 10, CoE Art. 11, CoE Art. 13 · Core clauseCoE Convention+23 more+23 more: EU AI Act Art. 9, Art. 3, Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 11, Art. 13, Art. 50, Art. 86, Art. 18, Art. 43, Art. 53(1)(d), Art. 50(2), 50(4), Art. 12, Art. 26(6), Art. 26, Art. 19, Art. 15, Art. 55, Art. 60, Art. 15(3), Art. 42(3), Art. 59, Art. 13(3)(b)(iv)–(v), Art. 47, Art. 48, Art. 40, Art. 57, Art. 58, Art. 61, Annex XI 1(2)(e), Art. 40(2), Art. 95(2)(b), G7 Code G7 Action 3, G7 Action 1, G7 Action 11, GAO AI Accountability 1.6, 2.1, 2.2, 2.4, 2.5, 1.9, 3.5, 1.7, 4.3, 3.7, 3.2, 2.7, 3.8, 2.8, 1.8, GB/T 45654 GB/T 45654 Corpus security, GB/T 45654 Content labelling, GB/T 45654 Security assessment, GDPR Art. 5(1)(c), Art. 25, Art. 9, Arts. 13–14, Art. 30, Art. 32, Art. 5(1)(a), Art. 5, Art. 6, Art. 35, Art. 15(1)(h), Art. 13(2)(f), Art. 22(3), Art. 42, GPAI Code Safety C1, Safety C3, Copyright 1.1–1.5, Transparency 1.1, Transparency 1.2, Safety 3.2, Safety C6, ISO 23894 23894 6.4, 23894 6.5, 23894 6.6, ISO 42001 6.1.2, 6.1.3, 8.2, 8.3, A.6, 6.1.4, A.7, A.7.3, A.4, 7.5, A.8, A.6.2.8, 9.1, A.5.4, A.8.2, 9.2, A.6.2.4, ISO 42006 ISO/IEC 42006, Korea AI Act Art. 34(1)(1), Art. 31, Art. 34(1)(2), Art. 34(1)(5), Art. 32(1), Art. 33, NIST AI RMF MAP 1, MAP 5, MANAGE 1, GOVERN 1.3, MAP 1.5, MANAGE 1.3, MANAGE 1.4, MAP 2, MAP 1.6, MANAGE 4, GOVERN 3.1, OECD AI Principles OECD 1.5(c), OECD 1.3, OECD 1.5(b), OECD 1.4, OECD 1.2, OECD 1.1, OWASP LLM LLM05:2026, LLM01:2026, LLM02:2026, Singapore Agentic Agentic 2.1, Agentic 2.3.3, Agentic 2.3.2, Singapore GenAI GenAI 2, GenAI 3, GenAI 5, GenAI 6, GenAI 9, TC260 Framework 3.0 TC260 2, TC260 Summary table, TC260 5.3.19, TC260 2.1.3, TC260 5.1, TC260 App. 2 II.6, TC260 5.3.6, TC260 3, TC260 5.3.14, UK ATRS ATRS 2.5.2, ATRS 2.4.3, ATRS Tier 1, ATRS 2.2, ATRS 2.4.2, ATRS 2.3.5, UK DUAA UK GDPR Art. 22B, UK GDPR Art. 22C, prEN 18228 prEN 18228, prEN 18229-1 prEN 18229-1, China Algo. Rec. AlgoRec Art. 27, AlgoRec Art. 16, AlgoRec Art. 21, AlgoRec Art. 17, EN 18286 EN 18286, OWASP Agentic ASI05NIST AI RMFMEASURE
What this obligation connects to Solid edges are direct relations, dashed ones looser (a case that cites the same article, a framework whose clauses only touch the topic); patterns and controls take the colour of their stack layer. Select a node to open it; the lists below give every relation in full.
Data table: every relation
Relations of AIGE-OBL-NISTRMF-MEASURE
FamilyItemRelation
PatternsAI Threat ModelDirect
PatternsAdversarial Red-Team SuiteDirect
PatternsClaims Substantiation GateDirect
PatternsDecision Notice & Contest PathDirect
PatternsDrift & Fairness MonitorDirect
PatternsEval Gate in CIDirect
PatternsExplanation ArtefactDirect
PatternsFairness Eval SuiteDirect
PatternsModel Artefact IntegrityDirect
PatternsModel Card as Control EvidenceDirect
PatternsRights Requests Against ModelsDirect
PatternsStaged Rollout with Rollback CriteriaDirect
Open controlsAIGE-CTL-EVAL-009 Evaluation Validity ChecksDirect
Open controlsAIGE-CTL-EVAL-005 Monitoring IntegrityDirect
Open controlsAIGE-CTL-ASSURE-002 Release Blocked Below the Eval ThresholdDirect
Open controlsAIGE-CTL-ASSURE-003 Signed Test Report Against the PlanDirect
Open controlsAIGE-CTL-ASSURE-001 Test Plan Frozen Before EvaluationDirect
Same crosswalk topicAI Verify 4.3.1, 4.7.1, 4.2.1, 8.1.1, 8.2.1, 1.1.6, 1.7.2, 1.1.1, 3.4.1, 9.8.1, 5.10.1, 4.1.1, 6.1.1, 5.2.1, 5.9.1, 7.1.1, 7.2.1, 7.8.1, 8.3.1, 8.3.2, 1.4.1, 2.2.1, 1.1.4, 11.1.1Core clause
Same crosswalk topicCSA AICM GRC-02, MDS-12, DSP-20, DSP-21, MDS-03, MDS-04, LOG-09, LOG-12, MDS-06, MDS-07, AIS-05, GRC-11, DSP-08, DSP-22, GRC-13, GRC-14, A&A-02, A&A-04, AIS-13Core clause
Same crosswalk topicChina AI Labelling Label Art. 4, Label Art. 5Core clause
Same crosswalk topicChina Deep Synthesis DeepSyn Art. 14, DeepSyn Art. 16, DeepSyn Art. 17, DeepSyn Art. 15, DeepSyn Art. 20Core clause
Same crosswalk topicChina GenAI Measures GenAI Art. 17, GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 12, GenAI Art. 19, GenAI Art. 4(2), GenAI Art. 7(3)Core clause
Same crosswalk topicCoE Convention CoE Art. 16, CoE Art. 14(2), CoE Art. 15(2), CoE Art. 16(2)(g), CoE Art. 10, CoE Art. 11, CoE Art. 13Core clause
Same crosswalk topicEU AI Act Art. 9, Art. 3, Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 11, Art. 13, Art. 50, Art. 86, Art. 18, Art. 43, Art. 53(1)(d), Art. 50(2), 50(4), Art. 12, Art. 26(6), Art. 26, Art. 19, Art. 15, Art. 55, Art. 60, Art. 15(3), Art. 42(3), Art. 59, Art. 13(3)(b)(iv)–(v), Art. 47, Art. 48, Art. 40, Art. 57, Art. 58, Art. 61, Annex XI 1(2)(e), Art. 40(2), Art. 95(2)(b)Core clause
Same crosswalk topicG7 Code G7 Action 3, G7 Action 1, G7 Action 11Core clause
Same crosswalk topicGAO AI Accountability 1.6, 2.1, 2.2, 2.4, 2.5, 1.9, 3.5, 1.7, 4.3, 3.7, 3.2, 2.7, 3.8, 2.8, 1.8Core clause
Same crosswalk topicGB/T 45654 GB/T 45654 Corpus security, GB/T 45654 Content labelling, GB/T 45654 Security assessmentCore clause
Same crosswalk topicGDPR Art. 5(1)(c), Art. 25, Art. 9, Arts. 13–14, Art. 30, Art. 32, Art. 5(1)(a), Art. 5, Art. 6, Art. 35, Art. 15(1)(h), Art. 13(2)(f), Art. 22(3), Art. 42Core clause
Same crosswalk topicGPAI Code Safety C1, Safety C3, Copyright 1.1–1.5, Transparency 1.1, Transparency 1.2, Safety 3.2, Safety C6Core clause
Same crosswalk topicISO 23894 23894 6.4, 23894 6.5, 23894 6.6Core clause
Same crosswalk topicISO 42001 6.1.2, 6.1.3, 8.2, 8.3, A.6, 6.1.4, A.7, A.7.3, A.4, 7.5, A.8, A.6.2.8, 9.1, A.5.4, A.8.2, 9.2, A.6.2.4Core clause
Same crosswalk topicISO 42006 ISO/IEC 42006Core clause
Same crosswalk topicKorea AI Act Art. 34(1)(1), Art. 31, Art. 34(1)(2), Art. 34(1)(5), Art. 32(1), Art. 33Core clause
Same crosswalk topicNIST AI RMF MAP 1, MAP 5, MANAGE 1, GOVERN 1.3, MAP 1.5, MANAGE 1.3, MANAGE 1.4, MAP 2, MAP 1.6, MANAGE 4, GOVERN 3.1Core clause
Same crosswalk topicOECD AI Principles OECD 1.5(c), OECD 1.3, OECD 1.5(b), OECD 1.4, OECD 1.2, OECD 1.1Core clause
Same crosswalk topicOWASP LLM LLM05:2026, LLM01:2026, LLM02:2026Core clause
Same crosswalk topicSingapore Agentic Agentic 2.1, Agentic 2.3.3, Agentic 2.3.2Core clause
Same crosswalk topicSingapore GenAI GenAI 2, GenAI 3, GenAI 5, GenAI 6, GenAI 9Core clause
Same crosswalk topicTC260 Framework 3.0 TC260 2, TC260 Summary table, TC260 5.3.19, TC260 2.1.3, TC260 5.1, TC260 App. 2 II.6, TC260 5.3.6, TC260 3, TC260 5.3.14Core clause
Same crosswalk topicUK ATRS ATRS 2.5.2, ATRS 2.4.3, ATRS Tier 1, ATRS 2.2, ATRS 2.4.2, ATRS 2.3.5Core clause
Same crosswalk topicUK DUAA UK GDPR Art. 22B, UK GDPR Art. 22CCore clause
Same crosswalk topicprEN 18228 prEN 18228Core clause
Same crosswalk topicprEN 18229-1 prEN 18229-1Core clause
Same crosswalk topicChina Algo. Rec. AlgoRec Art. 27, AlgoRec Art. 16, AlgoRec Art. 21, AlgoRec Art. 17Related clause
Same crosswalk topicEN 18286 EN 18286Related clause
Same crosswalk topicOWASP Agentic ASI05Related clause

Patterns that build it

The same topic in other frameworks

From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.

Risk management

Data governance

Documentation and transparency

Logging and traceability

Robustness, security and evaluations

Fairness and non-discrimination

Privacy and data protection

Open controls that evidence it

Draft controls in the open control profiles that map to this row: each states a requirement and the evidence it must leave behind.

Source

Chapter 08, section NIST AI RMF, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). NIST AI RMF MEASURE (AIGE-OBL-NISTRMF-MEASURE). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-nistrmf-measure. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{NIST AI RMF MEASURE (AIGE-OBL-NISTRMF-MEASURE)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-nistrmf-measure},
  note         = {Version 0.5.0}
}