Where risk lives · the nine domains
Nine domains, each governed through the RMF
Each domain is a container of risks, and all four RMF functions apply to every one. Filter by area, then open a domain for its risks, RMF mapping, a worked case study, tiers, and tools.
Why this matters
These nine areas are how you assign clear ownership — every AI use on campus has a named owner, so nothing runs unwatched. Start with the one domain your situation sits in.
Filter
9 shown
Domains 1–4
Academic Core & Student Outcomes
01
Consequential
Teaching, Learning & Assessment
Academic-integrity erosion and invalid assessment
All 4 RMF functions
02
Consequential
Research & Scholarship
Confidential and pre-publication data leaking into commercial models
All 4 RMF functions
03
Consequential
Institutional Algorithmic Decision-Making & Student Services
Biased consequential decisions on admission, aid, and retention
All 4 RMF functions
04
Assistive
Student AI Literacy, Career Readiness & Workforce
Graduates entering the workforce without expected AI competencies
All 4 RMF functions
Domains 5–7
Infrastructure, Risk & Vendors
05
Consequential
Data, Security, Privacy & AI-Enabled Systems
Shadow AI operating outside data governance
All 4 RMF functions
06
Consequential
Fairness, Transparency, Accountability & Algorithmic Oversight
Bias going undetected without audits
All 4 RMF functions
07
Operational
Procurement, Vendors & Legal
Hidden training-data and data-use terms in vendor contracts
All 4 RMF functions
Domains 8–9
People & Governance