Medicine · NIST AI RMF · MANAGE
NIST AI RMF · MANAGE for clinical AI workflows
NIST AI RMF · MANAGE in clinical AI workflows: what compliance requires, who asks for evidence, and the records to keep.
01 / The rule
What NIST AI RMF · MANAGE requires
Organizations adopting the AI RMF; MANAGE is done by system owners and risk owners who decide and carry out risk responses.
- 01Decide whether the AI system meets its purpose and should proceed; prioritize risk treatment by impact and likelihood (MANAGE 1.1, 1.2).
- 02Plan and document responses to high-priority risks: mitigate, transfer, avoid or accept (MANAGE 1.3).
- 03Assign mechanisms and responsibility to supersede, disengage or deactivate AI systems performing outside intended use (MANAGE 2.4).
- 04Monitor third-party AI resources and pre-trained models and apply documented controls (MANAGE 3.1, 3.2).
- 05Implement post-deployment monitoring plans with user input, appeal and override, and decommissioning (MANAGE 4.1).
- 06Track, respond to, recover from and communicate incidents and errors (MANAGE 4.3).
02 / In this sector
In a clinical AI workflow
AI-specific. It covers risk treatment and lifecycle response for AI systems, including shutdown and incident handling.
Clinical committees and health system AI governance.
HHS §1557 · HIPAA · FDA PCCP.
03 / Records
Records to keep
- 01Go or no-go decision record for deployment
- 02Risk treatment plan with accepted residual risk
- 03Post-deployment monitoring plan and override or deactivation procedure
- 04Incident log with response, recovery and communication records
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
SOURCES
Go back to the source
National Institute of Standards and Technology
National Institute of Standards and Technology
NIST Trustworthy and Responsible AI Resource Center
RELATED
Related: NIST AI RMF · MANAGE: the full guide · NIST AI RMF · MANAGE for defense · NIST AI RMF · MANAGE for law · NIST AI RMF · MANAGE for education