MRE 3.1 - Risk Tracking and Management

Approaches, personnel, and documentation are in place to regularly identify and track existing and emergent risks based on factors such as intended and actual performance in deployed contexts.

NIST AI RMF (in the playbook companion) has not defined MRE 3.1; however, Seclea Platform defines the relevant checks to this control requiring:

• Detailed documentation of the organisation's risk tracking and management procedures. If the organisation uses the Seclea Platform, additional checks can be added to track the AI risks.