Planisphere Download for Mac

Defense · NIST AI RMF · MAP

NIST AI RMF · MAP for defense AI workflows

NIST AI RMF · MAP in defense AI workflows: what compliance requires, who asks for evidence, and the records to keep.

Legal forceVoluntary framework
Applies from26 Jan 2023
SectorDefense
Checked21 Oct 2026

01 / The rule

What NIST AI RMF · MAP requires

Organizations adopting the AI RMF; MAP is done per AI system by the teams that design, develop, deploy or procure it.

  1. 01Document intended purposes, deployment settings, applicable laws and norms, mission goals and risk tolerances (MAP 1.1, 1.3, 1.5).
  2. 02Define the AI system's tasks and methods and document TEVV considerations, including data representativeness (MAP 2.1, 2.3).
  3. 03Document expected benefits, costs, targeted application scope and human oversight processes (MAP 3.1, 3.3, 3.5).
  4. 04Map technology and legal risks of all components, including third-party data, software and models (MAP 4.1, 4.2).
  5. 05Characterize likelihood and magnitude of impacts on individuals, groups, communities, organizations and society (MAP 5.1).

02 / In this sector

In a defense AI workflow

AI-specific. It frames the context and impacts of a particular AI system before measurement and treatment.

Usually asked by

Program office leads and ATO-package owners.

Named alongside

NIST AI RMF · DoW RAI · OMB M-25-21.

Sector pagePlanisphere for defense

03 / Records

Records to keep

  1. 01AI system context statement: purpose, users, deployment setting
  2. 02AI system categorization and documented application scope
  3. 03Component and third-party risk mapping
  4. 04Impact assessment with likelihood and magnitude estimates

Optional evidence · where Planisphere fits

Keep a record anyone can check

When your team meets a duty, Planisphere can seal the event it reports as a receipt.

01 · Your teamRecord the event

A disclosure shown, a review signed, a model change approved: the event your system reports.

02 · PlanisphereSeal it

The event becomes a sealed receipt, dated and attributed to whoever is signed in.

03 · AnyoneCheck it

Paste the receipt into Verify. No account or key.

A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.

SOURCES

Go back to the source

PRIMARY
PRIMARY
AI Risk Management Framework

National Institute of Standards and Technology

GUIDANCE
NIST AI RMF Playbook

NIST Trustworthy and Responsible AI Resource Center

RELATED

Related: NIST AI RMF · MAP: the full guide · NIST AI RMF · MAP for medicine · NIST AI RMF · MAP for law · NIST AI RMF · MAP for education