Watch Now

The NIST AI RMF requires organizations to assess AI risk. It tells you what to evaluate: the likelihood and impact of AI risks, the effectiveness of controls, prioritization, and whether the remaining risk aligns with your organization's risk appetite. What it never gives you is the method.

Lucas Hathaway has run dozens of NIST AI RMF assessments with organizations in highly regulated industries. In this session, he walks through the method step by step: defining the scope of an AI system, identifying and evaluating AI risks, assessing the controls in place, scoring likelihood and impact, and determining whether the residual risk falls within your organization's risk appetite. Half the hour is reserved for your questions.

Key takeaways

• What the NIST AI RMF actually requires for an AI risk assessment
• A step-by-step method for assessing the risks of an AI system
• How to evaluate controls, determine residual risk, and document the results
• Common AI risks and control gaps that appear in almost every first assessment, so you know where to focus first
• And get your questions answered live