SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/ai-rmf-measure

What happens in the MEASURE function of the NIST AI RMF?

Risks are analyzed, assessed, benchmarked, and monitored.

Start playing free

  1. Policies are ignored
  2. Deployment context is erased
  3. Risks are evaluated with evidence ✔

Why: MEASURE applies quantitative, qualitative, or mixed methods to mapped risks. Testing should occur before deployment and regularly during operation.

Huh, didn't know that: NIST recommends documenting uncertainty, benchmarks, methods, and results.

The dad joke
MEASURE brought a ruler, a survey, and a very careful notebook.
Like this card?
Play the game

References

Answer: Risks are evaluated with evidence. MEASURE applies quantitative, qualitative, or mixed methods to mapped risks. Testing should occur before deployment and regularly during operation.

  1. NIST AI Risk Management Framework 1.0 nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-1.pdf
    The MEASURE function employs quantitative, qualitative, or mixed-method tools, techniques, and methodologies to analyze, assess, benchmark, and monitor AI risk
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Artificial IntelligenceWhat makes GOVERN different from the other NIST AI RMF functions?Artificial IntelligenceWhat is the central job of MAP in the NIST AI RMF?Artificial IntelligenceWhat does MANAGE do with mapped and measured AI risks?

That's stuff everyone should know.