Generative AI Risks and Bias: NIST-AI-600-1 and SP 1270

NIST’s two most consequential companion documents: the Generative AI Profile’s twelve risk categories with the real incidents behind them, how its suggested actions plug into the RMF functions, and SP 1270’s socio-technical account of bias — systemic, statistical, and human-cognitive — with the fairness math and the state laws it prefigured.

Content current as of 2026-09.

Lessons

1. A profile for generative AI
2. The twelve GAI risk categories
3. From risks to actions: how the profile plugs into the RMF
4. SP 1270: the three lenses of bias
5. Measuring fairness — and governing it