NIST AI RMF vs SG Agentic AI: what they share and how they differ

NIST AI RMF and SG Agentic AI share 11 of 24 control themes and 10 checks. 89% of SG Agentic AI requirements can be proven with checks NIST AI RMF already uses, 31% the other way round.

USVoluntary frameworkVoluntary

NIST AI RMF

How to apply the NIST AI RMF to your AI systems

72 requirementsNext Dec 2026
SGVoluntary frameworkVoluntary

SG Agentic AI

How to govern AI agents under Singapore's framework

9 requirementsNext 2027
11/24shared control themes
10shared checks
89%of SG Agentic AI requirements covered by NIST AI RMF evidence
31%of NIST AI RMF requirements covered by SG Agentic AI evidence

At a glance

NIST AI RMF SG Agentic AI
JurisdictionUnited States (federal)Singapore
KindVoluntary framework sameVoluntary framework same
StatusVoluntary sameVoluntary same
BindingNo sameNo same
Object analysedAI system sameAI system same
ScopeAny organisation designing, deploying or using AI.Any organisation deploying AI agents in Singapore, built in-house or supplied by a third party.
Territorial reachNo territorial scope; de facto reference for US public buyers.Singapore; an international reference for agent governance.
PenaltiesNone (voluntary). Leverage: safe harbour in state laws.None (voluntary). The organisation remains legally accountable for its agents' actions under existing law (PDPA, contract, tort).
Qualification axesInternal risk tier (organisation-defined)Agent risk level (autonomy × access), Agent origin
RolesAI actorDeploying organisation, Agent developer
Requirements729
Next milestoneDec 2026, Expected RMF revision2027, Follow-up to the discussion paper on agents' legal responsibility

Theme by theme

requirements per theme

NIST AI RMFSG Agentic AI
Governance
13Governance & accountabilityshared1
2Inventory & categorisationshared2
2Literacy & competenceshared2
11Risk managementshared1
Assessment
6Impact assessmentsNIST AI RMF only
1Fairness & non-discriminationNIST AI RMF only
2Personal dataNIST AI RMF only
Build
8Technical documentationNIST AI RMF only
Logging & traceabilitySG Agentic AI only2
11Accuracy & robustnessshared1
1Cybersecurityshared1
1Environmental impactNIST AI RMF only
People & use
1Transparency & noticeshared1
3Human oversightshared3
4Explanation & redressNIST AI RMF only
Lifecycle & third parties
8Post-deployment monitoringshared1
6Incidents & corrective actionshared1
5Third parties & value chainshared1

What they share: one piece of evidence, two frameworks

10

CodeCheckRequirements NIST AI RMFRequirements SG Agentic AI
CHK-RISK-TOLERANCERisk tolerances are defined and AI systems are assigned to risk levels
GOVERN-1.3GOVERN-5.2MAP-1.5MANAGE-1.2MANAGE-1.3
SGA-1.1
CHK-ROLES-CLARIFIEDRoles, responsibilities and delegated authorities are documented and clear to relevant stakeholders
GOVERN-1.4GOVERN-2.1GOVERN-2.3GOVERN-3.2GOVERN-5.1MANAGE-1.4
SGA-2.1
CHK-INVENTORYA mechanism to inventory AI systems is in place and resourced
GOVERN-1.6
SGA-1.3
VER-008-03Competent overseers assigned to the system
GOVERN-3.2MAP-3.5
SGA-2.1SGA-2.2
VER-008-01Documented escalation and emergency stop procedure
GOVERN-3.2MAP-3.5
SGA-3.2
CHK-THIRDPARTY-POLPolicies address third-party AI/data risks, incl. IP, transparency and testing
GOVERN-6.1MAP-4.1
SGA-3.3
CHK-CATEGORIZATIONAI system tasks and methods are categorized (classifier, generative, recommender)
MAP-2.1
SGA-1.1
CHK-TEVVTEVV plan, test sets, metrics and data considerations are documented
MAP-2.3MEASURE-2.1MEASURE-2.13
SGA-3.1
VER-009-02Accuracy and robustness verified and documented
MEASURE-2.3MEASURE-2.5
SGA-3.1
VER-008-02System designed to allow human oversight (stop button, override)
MANAGE-2.4
SGA-1.2

Differences: requirements specific to each framework

Requirements with no check serving the other framework: the extra work.

NIST AI RMF

50

GOVERN-1.1
GOVERN-1.2
GOVERN-1.5
GOVERN-1.7
GOVERN-2.2
GOVERN-3.1
GOVERN-4.1
GOVERN-4.2
GOVERN-4.3
GOVERN-6.2
MAP-1.1
MAP-1.2
MAP-1.3
MAP-1.4
MAP-1.6
MAP-2.2
MAP-3.1
MAP-3.2
MAP-3.3
MAP-3.4
MAP-4.2
MAP-5.1
MAP-5.2
MEASURE-1.1
MEASURE-1.2
MEASURE-1.3
MEASURE-2.2
MEASURE-2.4
MEASURE-2.6
MEASURE-2.7
MEASURE-2.8
MEASURE-2.9
MEASURE-2.10
MEASURE-2.11
MEASURE-2.12
MEASURE-3.1
MEASURE-3.2
MEASURE-3.3
MEASURE-4.1
MEASURE-4.2
MEASURE-4.3
MANAGE-1.1
MANAGE-2.1
MANAGE-2.2
MANAGE-2.3
MANAGE-3.1
MANAGE-3.2
MANAGE-4.1
MANAGE-4.2
MANAGE-4.3

SG Agentic AI

1

SGA-4.1

Timelines

PastSet in the textPotentialTo verify
Jan 23, 2019SG Agentic AI · Model AI Governance Framework, 1st edition
Jan 21, 2020SG Agentic AI · Model AI Governance Framework, 2nd edition
May 25, 2022SG Agentic AI · AI Verify launched (governance testing)
Jan 26, 2023NIST AI RMF · AI RMF 1.0
May 30, 2024SG Agentic AI · Model AI Governance Framework for Generative AI
Jul 26, 2024NIST AI RMF · Generative AI Profile (NIST AI 600-1)
Jul 23, 2025NIST AI RMF · AI Action Plan asks for a revision of the framework
Jan 22, 2026SG Agentic AI · Agentic AI framework published (WEF)
May 20, 2026SG Agentic AI · Update: multi-agent systems, third-party agents, automation bias; discussion paper on legal responsibility for agents
Dec 2026NIST AI RMF · Expected RMF revision
2027SG Agentic AI · Follow-up to the discussion paper on agents' legal responsibility

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.

Request a demo