GOVERN 6

NIST AI RMF / Govern

The organization has rules for handling the risks that come from AI tools and data built by outside vendors, not just the parts it made itself.

Think of it likeChecking that the babysitter and the food delivery service you hire are trustworthy, because a stranger you let into the house is still your responsibility.

In plain English

Have a plan for the AI tools and data you buy or borrow from other companies, since a weakness in someone else's product can still become your problem.