SCW Aug 2026 Main Int - Client Report 2026-Global-AI-Cyber-Maturity-Report -july 29 | Page 8

AI – NIST AI RMF 1.0

We scored the four core functions of the NIST AI RMF 1.0 framework:
GOVERN
AI risk policies, board oversight, accountability
MAP
Identify and catalog AI systems and their risks
MEASURE
Monitor, evaluate and track AI risk continuously
MANAGE
Enforce controls, respond to and recover from AI incidents

Scoring

Every function is scored from 1 to 5, where 1 is the least mature( most vulnerable) and 5 is the most mature.
Level 1
Level 2
Level 3
Level 4
Level 5
INITIAL MANAGED DEFINED QUANTITATIVE OPTIMIZED
Unpredictable, reactive
Managed at project level, reactive
Managed at org level, proactive
Processes measured controlled
Focus on process improvement
Scoring based on CMM
8