---
title: NIST Control Families and AI RMF Mapping
description: NIST control-family framing and AI RMF mapping guidance for security planning.
---

# NIST Control Families and AI RMF Mapping

This reference summarizes the NIST control-family framing the Security Planner uses during standards mapping and backlog prioritization.

## NIST control-family framing

Common families to reference during planning include:

* AC — Access Control
* AU — Audit and Accountability
* CM — Configuration Management
* IA — Identification and Authentication
* SC — System and Communications Protection
* SI — System and Information Integrity

## AI RMF overlay

When `raiEnabled` is true, also consider AI RMF-aligned concerns such as:

* Model provenance and traceability
* Data quality and training-data integrity
* Human oversight for high-impact model decisions
* Adversarial robustness and content safety
* Measurement and monitoring of AI system risk

## Mapping usage

Use the control-family references to align threat mitigations and backlog items with the underlying standards vocabulary used by the planning workflow.
