In the sequence of the NIST AI RMF, which function is performed third?

• A. Measure
• B. Govern
• C. Map
• D. Manage

Answer: (A)

The sequence in the NIST AI RMF unfolds from setting direction to acting on it: governance establishes policy and oversight, mapping translates that direction into understanding scope and assets, measurement quantifies risk and monitors performance, and management uses those insights to implement controls and adapt activities. The third function is measurement, because after you’ve defined governance and identified what you’re protecting (through mapping), you need to assess how well things are performing and what risks remain. Measurement provides the data, metrics, and monitoring necessary to gauge risk levels and the effectiveness of safeguards before you move into implementing responses and adjustments. Mapping and governance come earlier, while managing (the last step) uses the insights from measurement to drive actions.