; (4) support and strategically engage in the development of voluntary consensus standards, including international standards, through open, transparent, and consensus-based processes; and (5) enter into and perform such contracts, including cooperative research and development arrangements and grants and cooperative agreements or other transactions, as may be necessary in the conduct of the work of the National Institute of Standards and Technology and on such terms as the Director considers appropriate, in furtherance of the purposes of this Act. (b) Risk management framework Not later than 2 years after the date of the enactment of this Act, the Director shall work to develop, and periodically update, in collaboration with other public and private sector organizations, including the National Science Foundation and the Department of Energy, a voluntary risk management framework for the trustworthiness of artificial intelligence systems. The framework shall— (1) identify and provide standards, guidelines, best practices, methodologies, procedures, and processes for assessing the trustworthiness of, and mitigating risks to, artificial intelligence systems; (2) establish common definitions and characterizations for aspects and levels of trustworthiness, including explainability, transparency, safety, privacy, security, robustness, fairness, bias, ethics, validation, verification, and other properties related to artificial intelligence systems that are common across all sectors; (3) provide guidance and implementation steps for risk management of artificial intelligence systems; (4) provide sector-specific case studies of implementation of the framework; (5) align with voluntary consensus standards, including international standards, to the fullest extent possible; (6) incorporate voluntary consensus standards and industry best practices; and (7) not prescribe or otherwise require— (A) the use of specific solutions