Federal AI compliance: NIST AI RMF from the engineer's seat
Connect AI risks to evidence, owners and decisions.
Reviewed: 2026-10-03
Source-based teaching example · Fictional data
Narration: Microsoft Mark · locally synthesized

00:00:00.000 — What you will learn

Connect AI risks to evidence, owners and decisions.

Visual description:
Connect AI risks to evidence, owners and decisions.

00:00:06.542 — The idea

Name who is responsible, understand the use, measure relevant failures and decide how to manage them. Keep evidence tied to the system. A pile of documents does not establish compliance.

Visual description:
Name who is responsible, understand the use, measure relevant failures and decide how to manage them. Keep evidence tied to the system. A pile of documents does not establish compliance.

00:00:21.875 — One useful term

NIST AI RMF. A voluntary framework for managing AI risk; it does not grant permission to operate a system.

Visual description:
A voluntary framework for managing AI risk; it does not grant permission to operate a system.

00:00:32.833 — A worked example

For the fictional summarizer, the team names owners, maps users and data, tests unsupported claims and denied actions, and records risk decisions. These activities inform repeated review.

Visual description:
For the fictional summarizer, the team names owners, maps users and data, tests unsupported claims and denied actions, and records risk decisions. These activities inform repeated review.

00:00:49.000 — Your turn to think

Does following this voluntary framework automatically establish legal compliance? Pause and decide before continuing.

Visual description:
Does following this voluntary framework automatically establish legal compliance?
Pause the video if you need more time.

00:01:07.750 — Why this answer works

No. The organization must identify its binding requirements and the authority responsible for approvals.

Visual description:
No. The organization must identify its binding requirements and the authority responsible for approvals.

00:01:17.625 — Check 1

Link risks to inspectable evidence.

Visual description:
Link risks to inspectable evidence.

00:01:22.833 — Check 2

Keep missing evidence unresolved.

Visual description:
Keep missing evidence unresolved.

00:01:27.875 — Check 3

Separate framework guidance from actual authorization.

Visual description:
Separate framework guidance from actual authorization.

00:01:34.083 — Now try a different case

Open the lesson and try its different practice case. Use every check in the full task. Watching alone does not mark the lesson complete.

Visual description:
Open the lesson
Try the new case
Check and revise
The full task and its requirements are in the linked lesson.