Does NIST AI RMF require independent / third-party evaluation?

The AI RMF is voluntary and does not mandate a third-party evaluator, but MEASURE 1.3 calls for evaluation by parties independent of the development team where feasible, and many downstream regimes (e.g. NYC LL 144) do require independence. An external,…

register 09 · Compliance pins· NIST AI RMF · MEASURE
01 ·

Answer.

Risk-management framework · NIST AI RMF · MEASURE.

The AI RMF is voluntary and does not mandate a third-party evaluator, but MEASURE 1.3 calls for evaluation by parties independent of the development team where feasible, and many downstream regimes (e.g. NYC LL 144) do require independence. An external, reproducible audit is the strongest way to satisfy that framing. Planisphere runs as an independent instrument and emits a record anyone can recompute; it measures model behaviour and does not issue a certification.

Cite-anchor: NIST AI 100-1 (AI Risk Management Framework) · MEASURE function

02 ·

The mark behind the answer.

NIST AI RMF · MEASURE is a process framework, not a pass/fail line: it names functions, categories and controls an organ…

Measure function · TEVV · 19 subcategories · the audit-triad home.

→ Full reference for NIST AI RMF · MEASURE

Prepare evidence for NIST AI RMF · MEASURE review.

First evidence record within 21 days of access · re-runs in a single business day. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.