Definition
A forthcoming addition to NIST's widely used Cybersecurity Framework, specifically tailored to the cybersecurity risks created by AI systems and the security capabilities AI itself can provide. It aims to give organizations a common set of controls to map their AI-related cyber risks against, much like the base framework already does for general IT risk.
Why it matters
Once finalized, this profile is likely to become the default checklist auditors and regulators expect organizations to follow for AI-specific cybersecurity, similar to how the core NIST Cybersecurity Framework became a de facto global standard.