Planisphere Download for Mac

Defense · NIST AI 600-1 GenAI Profile

NIST AI 600-1 GenAI Profile for defense AI workflows

NIST AI 600-1 GenAI Profile in defense AI workflows: what compliance requires, who asks for evidence, and the records to keep.

Legal forceVoluntary framework
Applies from26 Jul 2024
SectorDefense
Checked21 Oct 2026

01 / The rule

What NIST AI 600-1 GenAI Profile requires

Organizations that design, develop, deploy or use generative AI systems and choose to apply the AI RMF to them.

  1. 01Identify which of the 12 generative AI risks apply, e.g. confabulation, data privacy, information security, value chain integration.
  2. 02Apply suggested GOVERN actions, such as policies for generative AI use, incident disclosure and third-party model oversight.
  3. 03Map generative AI use context, data provenance and component dependencies (MAP actions).
  4. 04Run pre-deployment testing, red-teaming and ongoing evaluation of generative AI outputs (MEASURE actions).
  5. 05Track content provenance, monitor deployed systems and respond to incidents (MANAGE actions).

02 / In this sector

In a defense AI workflow

AI-specific. It addresses generative models such as large language models and image generators, and their supply chains.

Usually asked by

Program office leads and ATO-package owners.

Named alongside

NIST AI RMF · DoW RAI · OMB M-25-21.

Sector pagePlanisphere for defense

03 / Records

Records to keep

  1. 01Generative AI risk assessment against the 12 profile risks
  2. 02Red-team and pre-deployment test results
  3. 03Content provenance and output monitoring records
  4. 04Generative AI incident log and disclosure records

Optional evidence · where Planisphere fits

Keep a record anyone can check

When your team meets a duty, Planisphere can seal the event it reports as a receipt.

01 · Your teamRecord the event

A disclosure shown, a review signed, a model change approved: the event your system reports.

02 · PlanisphereSeal it

The event becomes a sealed receipt, dated and attributed to whoever is signed in.

03 · AnyoneCheck it

Paste the receipt into Verify. No account or key.

A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.

SOURCES

Go back to the source

PRIMARY
AI Risk Management Framework

National Institute of Standards and Technology

PRIMARY

RELATED

Related: NIST AI 600-1 GenAI Profile: the full guide · NIST AI 600-1 GenAI Profile for medicine · NIST AI 600-1 GenAI Profile for law · NIST AI 600-1 GenAI Profile for education