NIST AI RMF: Securing AI as It's Developed and Deployed

​Most AI security frameworks address the model after it ships. MITRE, OWASP, and CSA all built for the deployed layer. The harder question sits upstream: how do you govern the creation and management of AI systems in the first place?

NIST answered that with the AI Risk Management Framework, released in January 2023. The AI RMF builds trustworthiness into design, development, use, and evaluation.

​This session walks through how the AI RMF is structured, how to apply it, and the NIST resources sitting behind it. We cover adjacent frameworks already tied to it, including ISO/IEC 42001, and what is known about the coming 1.1 update.

Presenter
Michael Brown, CISSP, CISA, CISM, CGEIT, CRISC, is Security and Compliance Director at FRG Systems, where he owns HITRUST and SOC compliance. He is an ISSA Fellow and past president of the ISSA South Florida chapter, and has presented at BSides Tampa, HackMiamiCon, and ISSA International. He is currently standing up an AI security program built on ISO/IEC 42001 and the NIST AI RMF.

Hosted by AI Security Engineers Miami with Rod Soto and Bianca Diosdado