Policy Briefing — OMB Issues M-24-10 AI Risk Management Guidance
The U.S. Office of Management and Budget released Memorandum M-24-10 on March 19, 2024, requiring federal agencies to inventory AI use cases, implement risk management controls, and publish transparency dashboards by December 2024.
Executive briefing: The Office of Management and Budget issued Memorandum M-24-10 on , setting governance expectations for federal AI systems that also influence vendors serving public-sector customers.
Key updates
- AI inventories. Agencies must maintain system-level AI inventories, categorize use cases by risk, and publish public dashboards.
- Safety guardrails. Mandatory impact assessments, independent evaluation, and human oversight are required for safety-impacting AI applications.
- Vendor obligations. Contractors supplying AI to agencies must provide documentation covering training data provenance, testing, and governance processes.
Implementation guidance
- Align federal account teams and product managers on documentation packages needed to support agency AI inventories.
- Embed AI risk management controls (model cards, evaluation pipelines, human-in-the-loop workflows) into public-sector product roadmaps.
- Update compliance roadmaps to meet the December 2024 dashboard deadline and annual reporting cycles.