How is the industry market in terms of revenue of setting up a consulting firm which specialises in AI Risk management based on laws governing various regions across the globe, like NIST is US, EU have there own and so on...
The NIST AI RMF does have quite a bit of overlap with ISO 42001, in that many elements of the Govern, Map, Measure, and Manage function can be mapped onto ISO 42001 controls. However, it's not a perfect mapping, and NIST is both more high-level and very specific at the same time. For example, these Generative AI guidelines that NIST released are not present at all in ISO 42001.
