NIST Releases Concept Note for AI RMF Profile on Trustworthy AI in Critical Infrastructure

TLDR

NIST announced on April 7, 2026, the launch of development for an AI RMF Profile on Trustworthy AI in Critical Infrastructure. The profile will guide critical infrastructure (CI) operators in sectors like energy, water, transportation, and healthcare toward specific risk management practices when adopting AI-enabled capabilities. It aims to help operators communicate trustworthiness requirements to developers, vendors, and stakeholders across AI and CI lifecycles and supply chains, building on the broader NIST AI Risk Management Framework.

NIST AI RMF Profile Initiative

The nation’s critical infrastructure will increasingly rely on AI across Information Technology (IT), Operational Technology (OT), and Industrial Control Systems (ICS) to meet demands for safety, security, reliability, capacity, and efficiency. Adopting AI in these high-stakes environments requires systems that are worthy of trust.

As part of its Strategy for American Technology Leadership in the 21st Century, NIST’s Information Technology Laboratory is developing this profile to:

• Provide CI operators with actionable risk management practices for AI.
• Enable clear communication of trustworthiness requirements throughout supply chains.
• Support development of innovative solutions that manage risks effectively.

The profile will address the 16 critical infrastructure sectors and help operators navigate AI deployment with repeatable, full-lifecycle approaches.

NIST is creating a Trustworthy AI in Critical Infrastructure Profile Community of Interest for stakeholder feedback, including seminars, working sessions, and responses to requests for information. Participation is open to the entire CI ecosystem—sectors, roles, and supply chain partners.

Why this story matters

This represents a shift from general AI governance guidance to sector-specific expectations tailored to high-stakes environments where AI failures could have severe consequences for public safety and national security. By providing concrete practices and supply-chain communication tools, the profile gives CI operators, developers, and regulators a shared framework to build confidence in AI systems. It signals growing federal focus on operationalizing trustworthy AI in areas like energy, healthcare, finance, and transportation, where adoption is accelerating but risks remain complex. The community engagement approach aims to ensure the final profile is practical and widely adopted.

Sources

• NIST: “Concept Note: AI RMF Profile on Trustworthy AI in Critical Infrastructure” (April 7, 2026)
• NIST AI Risk Management Framework page updates referencing the April 7, 2026 release.