ARCHETYPAL
CGRCC / requirement

Govern 1.3

REQ-ddfeb966305e207a46d8 · LEGACY_INTERPRETATION · source version a90e5850a5545900

AI governance owners should determine risk-management effort based on risk tolerance

Meaning & implementation context

Catalog material requires organizational applicability review. Reported support, approval and maturity are statements from the source, not current enforcement verification.

Source Id
nist-ai-rmf-1
Control
Govern 1.3
Source Version
AI RMF 1.0 (2023)
Url
https://nvlpubs.nist.gov/nistpubs/ai/nist.ai.100-1.pdf
Actor
AI governance owners
Modality
should
Action
determine
Object
risk-management effort based on risk tolerance
Condition
AI lifecycle and deployment context; voluntary framework outcome
Exception
Not recorded
Timing
Not recorded
Authority
voluntary
Jurisdiction
United States
Checked At
2026-10-03
Status
interpretation-needs-review
Examples
{ "meetsRule": "AI governance owners follows the recommendation to \"determine\" for risk-management effort based on risk tolerance within these conditions: AI lifecycle and deployment context; voluntary framework outcome.", "doesNotMeetRule": "AI governance owners omits the recommended action \"determine\" for risk-management effort based on risk tolerance. This is a recommendation gap, not by itself a statutory violation.", "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match." }

Source-reported relationships

1 associations retained with their original context.

SUPPORTED BY SOURCE REQUIREMENT · AIR-1394624FB2@17b1694d9f8b5889

SOURCE_REPORTED_REVIEW_REQUIRED

{
  "sourceKey": "nist-ai-rmf-1@eeff9d803ee6",
  "locator": "Govern 1.3"
}
Inspect target record ↗

Owner interpretation review

Append a catalog review decision. The source record remains immutable.

Owner sign-in

Versioned CGRCC JSON
{
  "key": "REQ-ddfeb966305e207a46d8@a90e5850a5545900",
  "id": "REQ-ddfeb966305e207a46d8",
  "version": "a90e5850a5545900",
  "kind": "requirement",
  "lifecycle": "LEGACY_INTERPRETATION",
  "title": "Govern 1.3",
  "statement": "AI governance owners should determine risk-management effort based on risk tolerance",
  "family": "Governance",
  "body": {
    "sourceId": "nist-ai-rmf-1",
    "control": "Govern 1.3",
    "sourceVersion": "AI RMF 1.0 (2023)",
    "url": "https://nvlpubs.nist.gov/nistpubs/ai/nist.ai.100-1.pdf",
    "actor": "AI governance owners",
    "modality": "should",
    "action": "determine",
    "object": "risk-management effort based on risk tolerance",
    "condition": "AI lifecycle and deployment context; voluntary framework outcome",
    "exception": null,
    "timing": null,
    "authority": "voluntary",
    "jurisdiction": "United States",
    "checkedAt": "2026-10-03",
    "status": "interpretation-needs-review",
    "examples": {
      "meetsRule": "AI governance owners follows the recommendation to \"determine\" for risk-management effort based on risk tolerance within these conditions: AI lifecycle and deployment context; voluntary framework outcome.",
      "doesNotMeetRule": "AI governance owners omits the recommended action \"determine\" for risk-management effort based on risk tolerance. This is a recommendation gap, not by itself a statutory violation.",
      "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
    }
  },
  "versions": [
    {
      "version": "a90e5850a5545900",
      "key": "REQ-ddfeb966305e207a46d8@a90e5850a5545900"
    }
  ],
  "provenance": [],
  "relationships": [
    {
      "id": "MAP-226880f5f0c1a86a7720523b",
      "from": "AIR-1394624FB2@17b1694d9f8b5889",
      "to": "REQ-ddfeb966305e207a46d8@a90e5850a5545900",
      "kind": "SUPPORTED_BY_SOURCE_REQUIREMENT",
      "status": "SOURCE_REPORTED_REVIEW_REQUIRED",
      "body": {
        "sourceKey": "nist-ai-rmf-1@eeff9d803ee6",
        "locator": "Govern 1.3"
      },
      "fromKeys": [
        "AIR-1394624FB2@17b1694d9f8b5889"
      ],
      "toKeys": [
        "REQ-ddfeb966305e207a46d8@a90e5850a5545900"
      ],
      "resolution": "RESOLVED_REFERENCE_REVIEW_REQUIRED"
    }
  ]
}
Back to CGRCC Registry