Why enterprises pay for governance: the org answers for how its people use AI

NIST AI Risk Management Framework

Voluntary framework, first published 2023-01-26 — the de facto US standard.

No binding US federal AI law equivalent to the EU AI Act exists yet, so NIST's framework (plus its Generative AI Profile) is what US enterprises point to when asked how they govern AI risk. The FTC has separately treated AI-driven data leakage as an unfair-or-deceptive-practices matter.