What Schools Can Steal from the NIST AI Risk Framework

In January 2023, the National Institute of Standards and Technology published the AI Risk Management Framework — a voluntary playbook for managing AI risk. It's written for everyone from startups to federal agencies, and schools can steal its best ideas for free.

The framework organizes everything around four verbs: Govern, Map, Measure, Manage. Here's the school translation.

Govern: decide who owns AI decisions in your building. Not a committee that meets never — a named person who says yes or no to new tools.

Map: list where AI already touches students and staff. The vetted tools, the free ones teachers found on their own, the features hiding inside software you already bought. You can't govern what you haven't mapped.

Measure: check whether the tools actually work fairly. Do the reading app's recommendations differ by student group? Does the scheduling tool disadvantage anyone? You don't need a lab — you need someone asking the question with data in hand.

Manage: write down what you'll do when something goes wrong. A wrong AI-generated grade, a data exposure, a parent complaint. Decide the response before you need it.

That's the whole framework, minus the jargon. Four verbs, one page, no consultants required. The schools that do this won't just be safer — they'll be calmer, because the decisions stop being emergencies.

I explain frameworks; I don't give legal counsel.