News brief / Industrial Systems / Policy & Regulation
NIST puts critical infrastructure on its AI risk agenda
A concept note points to sector-specific practices; the framework remains voluntary.
Cite this work
OPEN VARIABLE. NIST puts critical infrastructure on its AI risk agenda. 2026-09-07. Updated 2026-09-08. https://www.openvariable.com/latest/critical-infrastructure-ai
The source record
NIST’s AI Risk Management Framework page identifies a concept note for a critical-infrastructure profile released on 7 April 2026. The agency describes the broader AI RMF as voluntary and says version 1.0 is under revision. National Institute of Standards and Technology ↗ · National Institute of Standards and Technology ↗
Why document status matters
A concept note, a finalized profile and an enforceable requirement have different standing. Procurement teams and researchers should preserve those labels when citing them. The existence of a framework does not establish that a particular system was evaluated against it or that the evidence remains current after the system changes.
Sources
- Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure
Official concept note. Profile under development; not a finalized profile or a certification of any particular system.
- AI Risk Management Framework
Official living framework page. Voluntary framework; a referenced concept note is not a final operational profile.