01
Scope of application & addressees
- Organisations developing, procuring, deploying or evaluating AI systems
- Product, risk, compliance, security and audit teams
02
Core regulatory mandates & key requirements
01Governance covers accountability, policy, staff capability and organisational culture.
02Risk mapping considers intended use, stakeholders and possible impacts.
03Testing, metrics, monitoring and response records support continuing improvement.
03
Enforcement & compliance timeline
Version 1.0 was released.
The Generative AI Profile was released.
NIST continued work on the next revision.