---
title: NIST AI RMF - Manage
description: Manage function subcategories for NIST AI RMF 1.0
---

# NIST AI RMF - Manage

The Manage function covers treatment, response, monitoring, and continuous improvement after risk has been identified.

## Manage subcategories

| ID     | Description                                                        |
|--------|--------------------------------------------------------------------|
| MN-1   | Risk prioritization                                                |
| MN-1.1 | Go/no-go determination based on risk assessment                    |
| MN-1.2 | Risk treatment prioritization by impact and likelihood             |
| MN-1.3 | High-priority risk response plans                                  |
| MN-1.4 | Residual risk documentation                                        |
| MN-2   | Benefit maximization and impact minimization                       |
| MN-2.1 | Resource management with non-AI alternatives considered            |
| MN-2.2 | Sustaining deployed value                                          |
| MN-2.3 | Unknown risk response procedures                                   |
| MN-2.4 | Supersede, disengage, or deactivate mechanisms                     |
| MN-3   | Third-party risk management                                        |
| MN-3.1 | Third-party monitoring and controls                                |
| MN-3.2 | Pre-trained model monitoring                                       |
| MN-4   | Risk treatment documentation                                       |
| MN-4.1 | Post-deployment monitoring, incident response, and decommissioning |
| MN-4.2 | Continual improvement activities                                   |
| MN-4.3 | Incident/error communication and recovery                          |

## Source attribution

This file preserves the Manage function structure from NIST AI RMF 1.0 for the RAI Planner's downstream risk-response guidance.
