All regulations & standards
Standards & frameworks · Regulation & standard

NIST AI RMF scenario testing with simulations

What is NIST AI RMF?

The NIST AI Risk Management Framework helps organizations govern, map, measure and manage the risks of designing, deploying and using AI systems.

iluminr simulations let teams rehearse the decisions NIST AI RMF cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.

Build a 12-month NIST AI RMF programOpen in the catalogue

Simulations mapped to NIST AI RMF

A boardroom at night, illustrating the Green Light: AI Board Governance MicrosimulationAI RiskGreen Light: AI Board GovernanceThis Microsimulation builds your awareness of director accountabilities when a company deploys AI into customer-facing operations. You will be asked to evaluate an AI deployment proposal under commercial pressure, navigate conflicting advice from executives, and test how governance, documentation and disclosure expectations apply when things go wrong. The scenario is based on real-world AI governance and D&O risk patterns faced by organizations across sectors.AI neural network visualization, illustrating the Breached: AI IP Leak MicrosimulationAI RiskBreached: AI IP LeakRespond to a sensitive data leak involving AI-generated content, focusing on incident assessments, situational awareness, and securing communication protocols.Digitally distorted face, illustrating the Deepfake Threat: Cyber Attack MicrosimulationAI RiskDeepfake Threat: Cyber AttackYour organization grapples with an AI-driven cyber-attack, where advanced deepfake technology is being used to generate highly convincing fraudulent communications. This attack triggers a governance breakdown, posing severe risks to the organization’s reputation and operational integrity. --- [EngUS] Your organization grapples with an AI-driven cyber-attack, where advanced deepfake technology is being used to generate highly convincing fraudulent communications. This attack triggers a governance breakdown, posing severe risks to the organization’s reputation and operational integrity.AI neural network visualization, illustrating the Poisoned: Data Corruption MicrosimulationAI RiskPoisoned: Data CorruptionAssess and mitigate the impact of a sophisticated data poisoning cyber-attack that has corrupted critical operational data and disrupted decision-making processes.AI neural network visualization, illustrating the Fairplay: AI Bias in a Critical Service MicrosimulationAI RiskFairplay: AI Bias in a Critical ServiceAddress the fallout from AI-driven bias in critical business services, focusing on managing stakeholder concerns and reassessing operational fairness.Emergency lights at night, illustrating the Digital Deceit: Workplace Threat MicrosimulationAI RiskDigital Deceit: Workplace ThreatA deepfake video falsely depicting the CEO making controversial remarks has been traced back to an employee's corporate laptop credentials. The video is circulating online, causing backlash, and prompting an urgent response to mitigate reputational damage and address the misuse of AI. --- Formerly titled 'Deepfake: Workplace Safety'AI neural network visualization, illustrating the Trained: AI Bias in Hiring MicrosimulationAI RiskTrained: AI Bias in HiringA tech company gets shutdown over AI bias allegations, disrupting global recruitment processes.AI neural network visualization, illustrating the Agent Autonomous: Customer Service MicrosimulationAI RiskAgent Autonomous: Customer ServiceDeveloped to explore the adoption of Agentic AI as part of a severe but plausible threat impacting a Critical Operation.AI agent profile cards over a glowing network, illustrating the Agent Down MicrosimulationAI RiskAgent Down: AI Agent FailureA forward-thinking Microsimulation that explores the potential impacts and response priorities associated with agentic AI in critical services.AI neural network visualization, illustrating the AI Lies: Fact vs Fiction MicrosimulationAI RiskAI Lies: Fact vs FictionAI-generated misinformation about your organization spreads faster than you can verify it. Separate fact from fiction, decide what to say publicly, and protect trust while the story is still moving.Glowing AI brain and doorway in a purple digital space, illustrating the Model Switch: AI Service Outage MicrosimulationAI RiskModel Switch: AI Service OutageAn issue affecting a foundational AI service triggers a wave of questions. Decide what matters, what doesn't and what to do next.AI chip connected to glowing data nodes, illustrating the AI Washing: Claims Under Scrutiny MicrosimulationAI RiskAI Washing: Claims Under ScrutinyYour AI claims to investors and customers come under scrutiny. Decide what you can stand behind, and what you correct.

Mapping is indicative. Confirm scope against your own obligations.

Frequently asked questions

What is NIST AI RMF?

The NIST AI Risk Management Framework helps organizations govern, map, measure and manage the risks of designing, deploying and using AI systems.

How do simulations help with NIST AI RMF?

Simulations let teams rehearse the decisions NIST AI RMF cares about against severe-but-plausible scenarios. iluminr keeps a record of who decided what, and when, which you can use as evidence of testing.

Which iluminr simulations map to NIST AI RMF?

Simulations mapped to NIST AI RMF include Green Light: AI Board Governance, Breached: AI IP Leak, Deepfake Threat: Cyber Attack, Poisoned: Data Corruption, Fairplay: AI Bias in a Critical Service and Digital Deceit: Workplace Threat, among others.

Who should take part?

These simulations are most often run with Risk, Data & AI, Chief AI Officer and AI Governance & Ethics.

Can I build a 12-month NIST AI RMF testing program?

Yes. The iluminr program builder suggests a 12-month plan of simulations for NIST AI RMF. You can add or remove scenarios and export the plan as a PDF for your board.

Can we customize these simulations?

Yes. Run any template as is, tailor the roles, plans, critical services and injects to your organization, or build your own from scratch with the iluminr builder.

Is this mapping legal or compliance advice?

No. The mapping between simulations and NIST AI RMF is indicative. Confirm scope against your own obligations.

More in Standards & frameworks