NIST AI 600-1: Generative AI Profile of the AI Risk Management Framework
Federal guidance on the risks specific to generative AI, including information security risks such as prompt injection and data poisoning, with suggested actions for governing, mapping, measuring, and managing them: provenance of content and components, incident disclosure, and monitoring.
Draft mapping. Drafted by the Register's agents from the rule's text and not yet confirmed by a person. It is the Register's reading, not legal advice: whether and how the rule applies to you is a question for counsel.
Controls this rule maps to
Required by the text The rule's text requires a measure that is this control, or plainly includes it. Implied A binding rule whose purpose needs this control, but whose text does not name it. The Register's reading. Recommended A voluntary standard or guidance recommends it; nothing binds you to it. Proposed Appears in a proposed rule or proposed provision that is not yet in force.
| Control | Strength | Where in the rule, and why | Confidence | Missing or failed in |
|---|---|---|---|---|
| Retrieved content as data C-I1 | Recommended | information security risks: direct and indirect prompt injection through content the system reads | medium | 5 cases |
| Provenance of the actor's software and hardware C-A3 | Recommended | value chain and component integration: provenance of third-party models, data, and components | medium | 1 case |
| Coordinated disclosure program C-O1 | Recommended | incident disclosure and engagement with outside reporters of issues | low | not yet seen missing in a case |