GOVERN, the cross-cutting function establishing a risk: Which core function is cross-cutting and informs the

GOVERN is the cross-cutting NIST AI RMF function that sets culture, policy, and accountability across the other three.

The question

Preparing for AIGP? Take the free 5-min readiness quiz →

1. MEASURE, the function applying test, evaluation, and quantitative metrics to assess trustworthy characteristics over time.

   Plausible but wrong: MEASURE assesses risks using TEVV, but it is not the cross-cutting function.
2. GOVERN, the cross-cutting function establishing a risk culture, policies, roles, and accountability across the others. ✓

   Correct: GOVERN is the cross-cutting function infused across MAP, MEASURE, and MANAGE.
3. MAP, the function establishing the context and framing the risks tied to a system's purpose before it is deployed.

   Plausible but wrong: MAP frames context and risk but is not cross-cutting across the others.
4. MANAGE, the function prioritizing and treating risks through mitigation, transfer, avoidance, or acceptance decisions.

   Plausible but wrong: MANAGE treats prioritized risks but is not the cross-cutting governance function.

How to remember it

GOVERN is the cross-cutting NIST AI RMF function that sets culture, policy, and accountability across the other three.

More Understanding How Laws, Standards and Frameworks Apply to AI questions

• Inclusive growth: Which option lists the OECD AI principles rather than another framework's structure? →
• ISO/IEC 42001: Which standard fits a certifiable AI management system? →
• Purpose limitation: Under data-protection law, which principle most directly challenges this secondary use? →
• All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →