---
title: NIST AI RMF - Govern
description: Govern function subcategories for NIST AI RMF 1.0
---

# NIST AI RMF - Govern

The Govern function establishes the cross-cutting risk culture, accountability, and policy foundations for AI systems.

## Govern subcategories

| ID     | Description                                                 |
|--------|-------------------------------------------------------------|
| GV-1   | Policies, processes, procedures, and practices              |
| GV-1.1 | Legal and regulatory requirements identified and integrated |
| GV-1.2 | Trustworthy AI characteristics integrated into policies     |
| GV-1.3 | Risk tolerance determined and documented                    |
| GV-1.4 | Transparent risk management policies established            |
| GV-1.5 | Ongoing monitoring processes defined                        |
| GV-1.6 | AI system inventory maintained                              |
| GV-1.7 | Decommissioning processes defined                           |
| GV-2   | Accountability structures                                   |
| GV-2.1 | Roles, responsibilities, and communication channels defined |
| GV-2.2 | Training programs for AI risk management established        |
| GV-2.3 | Executive leadership responsibility for AI risk             |
| GV-3   | Diversity, equity, inclusion, and accessibility (DEI&A)     |
| GV-3.1 | Diverse teams for AI development and oversight              |
| GV-3.2 | Human-AI oversight mechanisms defined                       |
| GV-4   | Organizational risk culture                                 |
| GV-4.1 | Safety-first mindset in AI development                      |
| GV-4.2 | Risk documentation and communication practices              |
| GV-4.3 | Testing and incident sharing protocols                      |
| GV-5   | Stakeholder engagement                                      |
| GV-5.1 | External feedback mechanisms established                    |
| GV-5.2 | Adjudicated feedback integration into risk management       |
| GV-6   | Third-party and supply chain risk                           |
| GV-6.1 | Third-party IP and rights risks assessed                    |
| GV-6.2 | Contingency plans for third-party failures                  |

## Source attribution

Content is adapted from NIST AI RMF 1.0 and preserved here for reference use in the RAI planner workflow.
