Federal AI Procurement Is a Risk-Management Control Plane
The Federal Artificial Intelligence Risk Management Act of 2024 proposed more than agency adoption of the NIST AI Risk Management Framework. It also contemplated acquisition support and contract language that would carry risk-management expectations into federal purchasing.
That may be the proposal’s most operationally important feature.
Federal agencies build some AI systems themselves, but they increasingly acquire models, cloud services, data, integrations, and AI-enabled products from vendors. If governance obligations stop at the agency boundary, agencies can remain publicly accountable for systems whose material evidence and operational control sit inside private contracts.
Procurement is therefore not an administrative step after AI policy. It is the control plane through which public accountability becomes enforceable across the supply chain.