Law / Frameworks / NIST AI RMF / Manage
NIST AI RMF, ManageMANAGE 3.1
AI risks and benefits from third-party resources are regularly monitored, and risk controls are applied and documented.NIST AI Risk Management Framework, version 1.0, January 2023 (NIST AI 100-1), MANAGE 3.1
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 3
- laws
- 3
- jurisdictions
- 0
- with court rulings behind them
- 1
- not yet in force
A law in force is unmarked; the rest wear their state: not yet in force
AI risk obligations
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 European Union |
AI Act, Article 26(1) to (5) (deployer use, human oversight, input data and monitoring) from , in 13 months |
If you are the deployer of a high-risk AI system, take appropriate technical and organisational measures to ensure you use it in accordance with the provider's instructions for use. |
 New Jersey |
New Jersey Disparate Impact Discrimination Rules, Automated Employment Decision Tools |
If your employment practice or policy that causes a disparate impact relies on an outside vendor's automated tool, take reasonable steps to ensure the vendor's tool is consistent with the New Jersey Law Against Discrimination; relying on the vendor does not by itself excuse a resulting disparate impact. |
AI sector rules
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 United States |
Interagency Supervisory Guidance on Model Risk Management (2026 revision) |
Apply model risk management to vendor and other third-party models, including validating them, developing an understanding of their conceptual soundness, design, development data and performance, and monitoring them on an ongoing basis. |
Full text of the NIST AI Risk Management Framework, public domain (a US government work). Every control of the framework.