An organization is mapping its AI systems to the NIST AI Risk Management Framework (AI RMF). The team is determining which organizational units should own specific AI risk functions. Which AI RMF core function is PRIMARILY concerned with establishing accountability structures and policies?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — GOVERN is right because it establishes the policies, processes, procedures, and organizational roles needed to manage AI risk, including accountability structures. When you're deciding which units own AI risk functions, accountability and policy ownership belong in GOVERN.
Full Explanation
The GOVERN function is correct because the GOVERN function of the NIST AI Risk Management Framework establishes the policies, processes, procedures, and organizational roles necessary to manage AI risk, including accountability structures. The MAP function is wrong because it contextualizes AI risks within the organizational context. The MEASURE function is wrong because it analyzes and assesses risks. The MANAGE function is wrong because it prioritizes and acts on risks. GOVERN is the foundational function establishing culture and accountability.