SOURCE READING
Original and translation
The excerpt and translation use the primary source below. Further references inform SHIO’s analysis.
Primary source
- Original title
- Artificial Intelligence Risk Management Framework (AI RMF 1.0)
- Original author / institution
- Elham Tabassi / National Institute of Standards and Technology
- Primary source
- National Institute of Standards and Technology
- Source language
- English
- Original publication date
This is an excerpt from the primary source abstract, not the complete report. Chinese and Japanese translations were prepared by SHIO on October20, 2026; SHIO analysis is presented separately. The original appears once when it matches the page language. Republished courtesy of the National Institute of Standards and Technology.
This edition uses the source language, so the original appears once.
As directed by the National Artificial Intelligence Initiative Act of 2020 (P.L. 116-283), the goal of the AI RMF is to offer a resource to the organizations designing, developing, deploying, or using AI systems to help manage the many risks of AI and promote trustworthy and responsible development and use of AI systems.The Framework is intended to be voluntary, rights-preserving, non-sector specific, and use-case agnostic, providing flexibility to organizations of all sizes and in all sectors and throughout society to implement the approaches in the Framework.SHIO analysis
An AI evaluation should end with a decision
The following is SHIO’s independent judgment and discussion of methods. It is separate from the source text and its translation.
SHIO reading note
Reading NIST’s 2023 risk framework and 2024 generative AI profile as a prompt to define a usable experiment, rather than another score to display.
The central idea
SHIO view: a model result becomes actionable only when someone can explain which decision the evidence supports.
What the sources establish
NIST published AI RMF 1.0 on January 26, 2023 as voluntary guidance for organizations developing or using AI. Its scope covers risks across different sectors and use cases. It offers a way to organize risk management; publication of the framework does not certify any particular product.
The generative AI profile, published July 26, 2024, is a companion to that framework. These are dated reference documents. Reading them together supports a practical distinction between a general approach to risk and the context in which a specific system will be used.
SHIO method: write the decision first
Before choosing an evaluation set, write a sentence that a project owner can accept or reject: this assistant may prepare a draft when the evidence is sufficient, and must request review when it is not. Define what “sufficient” means using examples from the intended workflow. Include incomplete requests and cases that should receive no answer.
Next, separate quality from the cost of a wrong action. A fluent summary with an unsupported detail and a correctly sourced summary delivered too late create different problems. Record both. Keep a fixed comparison set alongside new cases found during use, so an apparent improvement can be traced to an actual change.
SHIO judgment and limits
For a small pilot, the useful artifact is a decision record: the task, test cases, observed failures, owner, and conditions for stopping. A customer-support draft, for example, could be assessed against the approved policy available on the test date. This is a proposed workflow, not a reported SHIO result.
A passing result remains conditional on the tested inputs, system version, and review process. It does not establish universal reliability or business return. Revisit the decision when those conditions change. Giving an idea form means making the next action accountable to evidence, including evidence that says the system is not ready.
A question for practice
Start with one consequential decision, then build the smallest evaluation that could change it.
REFERENCES & EDITORIAL NOTE
Sources & further reading
The source’s original title, author and basis for use appear in the source section. Excerpts, SHIO translations and independent analysis are clearly separated. References include the primary source and supporting material for checking the evidence and its context.
National Institute of Standards and Technology · Primary source
Artificial Intelligence Risk Management Framework (AI RMF 1.0)
Original source date：Accessed：The official NIST Technical Series Publications policy states that NIST employee works are not copyright-protected in the United States and grants a worldwide, royalty-free right to reprint and create derivative works to the extent NIST asserts foreign rights. The selected original report text is attributed to NIST, not to an external quotation; no third-party tables, figures, logos or images are reproduced. The policy warns that third-party-authored works may remain protected. Attribution is retained and the Chinese/Japanese text is marked as SHIO translation dated2026-10-20. Policy/source: https://www.nist.gov/open/copyright-fair-use-and-licensing-statements-srd-data-software-and-technical-series-publications
National Institute of Standards and Technology
Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile
Original source date：Accessed：NIST employee works: U.S. public domain; third-party exceptions. Original editorial analysis; no full translation. Policy: https://www.nist.gov/open/license