Context-specific implementations of the NIST AI Risk Management Framework tailored to particular industries, technologies, or risk types.
Profiles allow organizations to move from the abstract NIST Core to practical requirements. Common examples include the Generative AI Profile and the Cybersecurity Profile. They help teams prioritize the specific sub-category risks (e.g., hallucinations in LLMs) that are relevant to their specific business use cases, ensuring the governance effort is targeted rather than generic.
A healthcare company adopts the NIST AI RMF Generative AI Profile to specifically manage the risk of patient data leakage when using LLMs for medical scribing.
