Governance
We help you use AI without putting trust at risk.
We write the policy, the risk framework and the assurance process that let your organisation approve AI work.
The service
Good guardrails let AI through under conditions you can defend.
Governance decides whether AI in your organisation becomes a confidence-building story or a front-page problem. We build governance that is proportionate to risk and exception-based, so it stays light where the risk is low, tightens where it is not, and stops approval becoming the step that kills good ideas. At the Department of Home Affairs this took the form of a Data and AI Governance Framework naming the Chief Data and Analytics Officer as the Accountable AI Official.
Services
Here is what governance work involves.
- We write the data and AI governance framework, including decision rights and accountabilities.
- We develop AI policy, guidelines and an acceptable use position.
- We design AI Impact Assessment pathways and risk screening.
- We set up the AI register and the ethical review process.
- We align to the APS AI Plan, the WoG AI Policy and the PSPF in government, and to the Privacy Act, your regulator and your board everywhere else.
- We support your Accountable AI Official and design the governance body around them.
Why it works
Here is why we approach governance this way.
Governance that ignores proportionality gets bypassed by the people it applies to, or it becomes theatre.
Cyber, legal, privacy and ethics have to be design decisions, because retrofitting them costs far more than including them.
We have drafted the instruments regulators and auditors ask to see, and companies and not-for-profits get governance built to that same public sector safety standard.
We arrive with working templates for impact assessments, registers, risk tiers and review thresholds, so nobody starts from a blank page.
By stage
We scope governance to where you actually are.
You are aware of AI but have no strategy yet.
- We set initial guardrails.
- We write an acceptable use policy.
Your strategy is forming and the first use cases are running.
- We build the governance framework.
- We design the AIA pathway.
- We stand up the AI register.
AI is running and you are ready to expand and govern it.
- We extend assurance across the enterprise.
- We put monitoring in place.
- We get you ready for audit.
Contact
Tell us what you are trying to do and we will tell you whether AI helps.
If AI is the wrong tool for your problem we will say so, and we will explain why.