MRE 1.1 - Approaches and Metrics

Approaches and metrics for quantitative or qualitative measurement of the most significant risks, identified by the outcome of the Map function, including context-relevant measures of trustworthiness, are identified and selected for implementation. The risks or trustworthiness characteristics that will not be measured are properly documented.

NIST AI RMF (in the playbook companion) has not defined MRE 1.1; however, Seclea Platform defines the relevant checks to this control requiring:

• A detailed description of the approaches and metrics adopted by the organisations. The Seclea Platform or other sources can provide these approaches and methods, which the organisation must list in a comprehensive document and ensure that they are regularly followed. If the Seclea Platform provides the approaches and metrics, they can be integrated directly as checks.