Framework Resources
External standards, templates, and references that support the playbook pillars—especially Governance, Foundation, and Execution. Start from the Framework or the Implementation Guide, then use these sources for depth. For readiness scoring, use the Foundation Readiness Check.
NIST AI Risk Management Framework
Core Documents
| Resource | Description |
|---|---|
| AI Risk Management Framework 1.0 | Official NIST AI RMF defining Govern, Map, Measure, and Manage functions for trustworthy AI (PDF, 65 pages). |
| AI RMF Playbook | Companion guidance with suggested actions, documentation templates, and references (living PDF). |
| Generative AI Profile | NIST profile for managing risks unique to generative AI systems (PDF, July 2024). |
| Bias in Artificial Intelligence (NIST SP 1270) | Technical overview of bias in AI systems and mitigation considerations. |
Assessment Tools & Hubs
| Resource | Description |
|---|---|
| NIST AI Resource Center | Interactive hub linking AI RMF core documents, playbooks, and implementation aids. |
| NIST AI RMF Crosswalks | Mappings between AI RMF and ISO/IEC, OECD, and other frameworks. |
Government Resources
| Resource | Description |
|---|---|
| GSA AI Governance Toolkit | Practical toolkit for federal AI governance and responsible use (PDF). |
| GSA AI Community of Practice | Government AI community resources and guidance. |
License: All NIST resources are public domain (free)
NIST Cybersecurity Framework 2.0
Core Documents
| Resource | Description |
|---|---|
| CSF 2.0 Core Framework | Canonical CSF 2.0 document with Functions, Categories, and Subcategories (PDF, 60 pages). |
| CSF 2.0 Resource Guide (NIST SP 1299) | Detailed guidance on applying and tailoring the Cybersecurity Framework. |
| Organizational Profiles Guide (NIST SP 1301) | How to build and use organizational and community CSF profiles. |
| Small Business Quick Start (NIST SP 1300) | Condensed CSF adoption path for small organizations. |
Assessment Tools & Templates
| Resource | Description |
|---|---|
| Organizational Profile Template | Excel template from NIST for documenting current and target CSF profiles. |
| Community Profile Template | Draft Excel workbook for sector or community-wide CSF profiles. |
| Quick-Start Guides | Topic-specific PDF guides for rapid CSF implementation. |
License: All NIST CSF resources are public domain (free)
ITIL (Information Technology Infrastructure Library)
Official Checklists & Templates
| Resource | Description |
|---|---|
| ITIL Process Checklists Index | Reference index of commonly used ITIL process checklists. |
| ITIL Process Maps Wiki | Web portal with process maps and checklist references. |
| Free ITIL Templates Suite (Smartsheet) | PDF and Word templates for common ITSM workflows. |
| ITIL Service Management Templates (Thought Rock) | Downloadable templates aligned to service management practices. |
Open Source ITSM Tools
| Resource | Description |
|---|---|
| iTop | Open-source CMDB and IT service management platform (GitHub, AGPL). |
| GLPI | Asset and IT service management software (GitHub, GPL). |
| OpenTRIM | Free ITIL-oriented process templates and reference material. |
License: Checklists free; full ITIL certification/training is paid. Open source tools are GPL/AGPL.
PMBOK (Project Management Body of Knowledge)
Free Courses & Learning
| Resource | Description |
|---|---|
| PMI KICKOFF Program | Short free course (~45 minutes) plus starter templates for new project managers. |
| PMI Insights & Templates | Articles and free downloadable templates from PMI. |
| PMI Free Online Courses | Curated free learning modules from PMI. |
Free Templates
| Resource | Description |
|---|---|
| PMBOK Document Templates (GitHub) | Community Markdown templates mapped to PMBOK knowledge areas. |
| Project Management Plan Suite | Multi-document suite for integrated project planning. |
📖 Full PMBOK Guide
| Resource | Description |
|---|---|
| PMBOK Guide (7th Edition) | Official PMI standard—purchase (~$99) or obtain via PMI membership. |
License: Templates are free; core PMBOK Guide requires purchase
COBIT (Control Objectives for IT)
Official Toolkit
| Resource | Description |
|---|---|
| COBIT 2019 Governance System Design Toolkit | ISACA Excel toolkit covering 231 practices with RACI-style accountability mapping. |
Assessment Checklists
| Resource | Description |
|---|---|
| IT Governance Audit Checklist | Free PDF checklist aligned to COBIT IT governance themes. |
| Data Governance Audit Checklist | Free PDF checklist for data governance controls. |
| COBIT 5 Assessment Questionnaire | Web article with downloadable questionnaire for maturity assessment. |
| COBIT Resource Center | Official COBIT resources, design tools, and references. |
License: Toolkit and checklists free; design/implementation guides are paid by ISACA
CMMI (Capability Maturity Model Integration)
📊 Self-Assessment Tools
| Resource | Description |
|---|---|
| CMMI V3.0 Self-Assessment Tool | Interactive PDF workbook for informal maturity self-evaluation (free). |
| Maturity Assessment Checklist | Excel checklist for CMMI practice coverage. |
| IT Maturity Scorecard | Excel/PPT scorecard templates for IT capability maturity. |
Improvement Worksheets
| Resource | Description |
|---|---|
| Process Improvement Worksheets | Collection of worksheets and checklists for CMMI-style improvement. |
| DoD Self-Assessment Guidance | Public-domain PDF with structured self-assessment guidance. |
📖 Framework Overview
| Resource | Description |
|---|---|
| CMMI V3.0 Comprehensive Guides (Theoris) | Overview articles and links for CMMI V3 model structure. |
| CMMI Institute Appraisal Methods | Official information on formal appraisals and benchmarking. |
License: Self-assessment tools are free; official certification and appraisal services are paid
AI-Specific Governance Resources
Template Collections
| Resource | Description |
|---|---|
| AONA AI Templates | 25+ free downloads including acceptable use, risk assessment, bias testing, and model documentation. |
| GoodCorporation AI Governance Framework | PDF framework outlining governance principles and assessment areas. |
| Allens AI Governance Toolkit | Legal/industry toolkit summarizing controls and policies for AI programs (PDF). |
🔍 Assessment & Readiness
| Resource | Description |
|---|---|
| AI Readiness Assessment Framework | Blog article with checklist-style readiness dimensions for AI adoption. |
| OpenLoop AI Governance Reports | Portal of reports and briefings on AI governance topics. |
| ISACA AI Audit Toolkit | Paid toolkit for auditors ($49 members / $99 non-members). |
License: Most AI governance resources are free; ISACA toolkit is paid
Quick Reference: Free vs Paid
Fully Free (Public Domain)
- NIST AI RMF (all documents + playbook)
- NIST Cybersecurity Framework 2.0 (all guides + templates)
- GSA AI Governance Toolkit
Partially Free (Core Toolkit Free)
- ITIL (102 checklists free, certification paid)
- PMBOK (templates free, guide $99)
- COBIT (toolkit free, guides paid)
- CMMI (self-assessment free, certification paid)
How to Use These Resources: Start with NIST AI RMF (fully free) to establish governance fundamentals. Then layer in ITIL (service management), PMBOK (project delivery), COBIT (IT controls), and CMMI (process maturity) as your organization matures.