A company's AI security team is implementing the NIST AI Risk Management Framework (AI RMF) for their Azure AI platform. The team needs to identify which AI RMF function maps to the activity of continuously monitoring deployed AI model performance for unexpected behavior changes. Which AI RMF function does this activity belong to?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — continuous monitoring of deployed AI models for unexpected behavior changes falls under the MANAGE function because it's an ongoing operational activity for prioritizing, responding to, and monitoring AI risks. You're not just setting policy or assessing risk once; you're actively managing what the deployed system is doing.
Full Explanation
The correct answer is the MANAGE function, because the NIST AI RMF MANAGE function covers prioritizing, responding to, and monitoring AI risks, including ongoing operational monitoring of deployed AI systems for unexpected behavior, performance degradation, or emerging risks. Continuous monitoring of deployed model behavior is an ongoing operational activity that falls within MANAGE. The option describing GOVERN as establishing policies and accountability structures for AI risk management is incorrect because GOVERN establishes organizational policies, accountability structures, and risk tolerance for AI; it sets the framework rather than conducting monitoring activities. The option describing MAP as identifying AI risks and their contexts is incorrect because MAP identifies and categorizes AI risks in context before or during deployment, not the ongoing monitoring of deployed systems. The option describing MEASURE as analyzing and assessing AI risks is incorrect because MEASURE involves analyzing and assessing the likelihood and impact of identified AI risks, including testing; ongoing production monitoring of deployed systems is MANAGE.