The Short Version
NIST expressly designed its Generative AI Profile to help organizations govern and manage generative AI risks. It can therefore serve as a governance reference, although it is voluntary guidance rather than a binding regulation or automatic guarantee of legal compliance.