Why Use a Framework
"Use AI ethically" is too abstract to work in the field. Adopting a framework you can apply in practice gives you a common language for internal-rule setting, risk assessment, and external-audit response. Here's a comparison of 3 representative ones.
NIST AI RMF 1.0 (US, Practice-Leaning)
Published by NIST in 2023. Not legally binding, but a practice-oriented frame also mappable to the EU AI Act's high-risk requirements. Composed of 4 core functions.
- Govern: set up the organization's risk culture, policy, responsibility structure
- Map: grasp the AI system's context, stakeholders, potential impact
- Measure: quantitatively evaluate accuracy, fairness, robustness, transparency
- Manage: prioritize risks, respond, monitor, communicate
Each function has categories/subcategories defined, easy to handle with the same structure as the CSF (NIST's cybersecurity framework). The style is to concretize via Profiles (per-industry profiles).


