NIST AI 600-1: Generative AI Profile
Safety and Sustainability

NIST AI 600-1: Generative AI Profile NISTAI600-8: Dangerous Content, CSAM, Environmental Impacts (Risks 3, 11, 12)

What does NISTAI600-8 require?

Mitigate dangerous + violent + hateful content per RISK-03 + RISK-12 including: content safety filters + classifier ensembles + human moderation + reportable to NCMEC for CSAM (Risk 11 obscene/degrading/abusive content) per US 18 USC 2258A + UK Online Safety Act + EU DSA Article 16 + India IT Rules. Mitigate environmental impacts per RISK-04 including: energy consumption tracking + carbon emissions measurement + water usage + Green Software Foundation principles + carbon offsetting where appropriate + datacentre PUE optimisation. Coordinate with Value Chain and Component Integration per RISK-11 for supply chain transparency including foundation model providers + datasets + plugins.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 35 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

BREEAM - Building Research Establishment Environmental Assessment Method · 4 controls

  • Ene 01 Reduction of Energy Use and Carbon Emissions
  • Hea 02 Indoor Air Quality
  • LE 03 Ecological Value and Biodiversity
  • Man 03 Responsible Construction Practices

Science Based Targets Initiative (SBTi) - Net-Zero Standard · 4 controls

  • C13 Target Recalculation
  • C18 No Offsetting of Targets
  • C19 BVCM Reporting
  • SBTONE-5 Beyond Value Chain Mitigation (BVCM) and No Offsetting

ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3) · 3 controls

  • ISO-14064-3-5 Selecting the validator/verifier
  • ISO-14064-3-8 Assessing GHG data and information
  • ISO-14064-3-9 Evaluating GHG assertions

ISO 20400:2017 - Sustainable Procurement · 3 controls

  • ISO-20400-7.2 Integrating sustainability into specifications
  • ISO-20400-7.3 Supplier selection
  • ISO-20400-7.4 Contract management and review

ISO 26000:2010 · 3 controls

  • ISO-26000-6.5.1 Prevention of pollution
  • ISO-26000-6.5.3 Climate change mitigation and adaptation
  • ISO-26000-6.5.4 Protection of the environment and biodiversity

South Korea Korea Internet Self-Governance Organisation (KISO) Code of Ethics · 3 controls

ISO 14001:2015 · 2 controls

  • 6.1.4 Planning action
  • 8.1 Operational planning and control

Florida Digital Bill of Rights (FDBR) · 1 control

  • FDBR-Section112.23-Government-Moderation Government-Directed Content Moderation Prohibition (Fla. Stat. 112.23)

IEC 60601-1 - Medical Electrical Equipment Safety · 1 control

  • 60601-1.13 Hazardous situations and fault conditions

Vietnam Law on Cybersecurity (No. 116/2025/QH15) · 1 control

  • VIETNAMCYBER-4 Incident Reporting and Cooperation

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 35 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST AI 600-1: Generative AI Profile controls