NIST AI RMF: GOVERN 1.3
Provision nist.GOVERN-1.3 · AI Risk Management Framework 1.0, subcategories · subcategory
Processes and procedures are in place to determine the needed level of risk management activities based on the organization's risk tolerance.
The text is as taken from the source. In the source: https://airc.nist.gov/airmf-resources/playbook/govern/#Govern%201.3 (the subcategory, in the NIST AI RMF Playbook (anchor found in the page); linked 2026-11-10). The instrument: AI Risk Management Framework 1.0, subcategories, a United States government work; freely reusable; read 2026-11-10.
Who cites it
| Indicator | The fact it asks for | Kind of link | The assertion |
|---|---|---|---|
I35 | Agents and use cases are classed by risk | same: evidenced | Asserted in the mapping by gamma-ray@web-summit.dinis; the written basis is not recorded yet. |
A link is our assertion, not the instrument's. "Same" carries the evidence to the provision in full. "Part" marks the provision as partly evidenced: the fact is one piece of what it asks. "Negation" points the other way.
The evidence that reaches it
No published card reaches this provision yet. That is not a no.
Touched never means complies.
Answer it directly
A company can answer this line item itself, in its own file at /.well-known/fact-ray.json, with the node gamma-ray:provision/nist.GOVERN-1.3 (how). A company that already assesses itself against NIST AI RMF can reuse that work.