NIST Framework: Thoughts
NIST Framework 1.0 To explore threat modelling for societal risks from AI, I read up on the NIST Framework and made a baseline NIST User Profile for the use case of: “LLM Public Use In Islamic Jurisprudence And Theology By Minors”: NIST AI Risk Management Framework 1.docx This taught me what NIST is good at, what its not so good at, and how we can improve it. What is NIST good at? NIST is quite useful in identifying which actors exist at each stage of the AI lifecycle, and what risks pertain to each actor at every stage. This systematic evaluation helps formulate and expand your thoughts on the reach of your system. NIST also works quite well for specific domain risk analysis. What is NIST not so good at? NIST does not provide guidance for analysing risk presented by technologies that present cross-domain risks with different risk severity and probability profiles for each domain. The NIST cross-sectoral profile on Generative Artificial Intelligence highlight...