# NIST AI RMF: GOVERN 1.5

> GAMMA-Ray v0.0.158 (beta, for review; every rating is experimental). One line item of AI Risk Management Framework 1.0, subcategories (nist.GOVERN-1.5): its text, its place in the source, the indicators that cite it and the evidence that reaches it.
> Page: https://gamma-ray.sgit.ai/provisions/nist.GOVERN-1.5/ · Source: data/provisions.json


Provision nist.GOVERN-1.5 · AI Risk Management Framework 1.0, subcategories · subcategory

> Ongoing monitoring and periodic review of the risk management process and its outcomes are planned, organizational roles and responsibilities are clearly defined, including determining the frequency of periodic review.

The text is as taken from the source. **In the source:** [https://airc.nist.gov/airmf-resources/playbook/govern/#Govern%201.5](https://airc.nist.gov/airmf-resources/playbook/govern/#Govern%201.5) (the subcategory, in the NIST AI RMF Playbook (anchor found in the page); linked 2026-11-10). The instrument: [AI Risk Management Framework 1.0, subcategories](../../instruments/index.md), a United States government work; freely reusable; read 2026-11-10.

## Who cites it

| Indicator | The fact it asks for | Kind of link | The assertion |
|---|---|---|---|
| [`I43`](../../questions/index.md#I43) | It is monitored in operation | part: partly evidenced | Asserted in the mapping by gamma-ray@web-summit.dinis; the written basis is not recorded yet. |

A link is our assertion, not the instrument's. "Same" carries the evidence to the provision in full. "Part" marks the provision as partly evidenced: the fact is one piece of what it asks. "Negation" points the other way.

## The evidence that reaches it

| Card | Through | This provision is | The evidence | How far to trust it |
|---|---|---|---|---|
| [The PrompTugal.news agent team](../../spectrum/cards/promptugal-newsroom-team/index.md) | `I43` | partly evidenced | [Source](https://github.com/PrompTugal/PrompTugal__News__Website/tree/dev/board/abp/reports) | π Moderate · S1·R5·A1 ×2 |
| [Claude Code, on your own machine](../../spectrum/cards/claude-code-local/index.md) | `I43` | partly evidenced | [Source](https://code.claude.com/docs/en/monitoring-usage) | π Moderate · S1·R5·A1 ×3 |

Touched never means complies.

## Answer it directly

A company can answer this line item itself, in its own file at `/.well-known/fact-ray.json`, with the node `gamma-ray:provision/nist.GOVERN-1.5` ([how](../../fact-ray/well-known/index.md)). A company that already assesses itself against NIST AI RMF can reuse that work.

[All provisions](../../provisions/index.md)