/tags/nist-ai-rmf/ Recent content in Nist-Ai-Rmf on Napat's Inverse Blog Hugo en-us Sun, 22 Mar 2026 08:01:00 +0700 /2026-03-22-frameworks-dont-ship/ Sun, 22 Mar 2026 08:01:00 +0700 /2026-03-22-frameworks-dont-ship/ <h2 id="turning-nist-ai-rmf--the-genai-profile-into-an-appsec-backlog-that-actually-changes-risk">Turning NIST AI RMF + the GenAI Profile into an AppSec Backlog That Actually Changes Risk</h2> <p>There is a recurring mistake in security.</p> <p>We mistake agreement for execution.</p> <p>A team says they are “aligned to a framework,” and everyone relaxes. The slide looks good. The architecture review sounds mature. The policy document has all the right words.</p> <p>Then an incident happens, and we discover the ugly truth: nouns don’t defend systems. Verbs do.</p> <p>A framework is mostly nouns. Engineering is mostly verbs.</p>