# Governance

> We help you use AI without putting trust at risk.

- Type: Service
- URL: https://www.blackmountainai.com.au/services/governance

We write the policy, the risk framework and the assurance process that let your organisation approve AI work.

## Good guardrails let AI through under conditions you can defend.

Governance decides whether AI in your organisation becomes a confidence-building story or a front-page problem. We build governance that is proportionate to risk and exception-based, so it stays light where the risk is low, tightens where it is not, and stops approval becoming the step that kills good ideas. At the Department of Home Affairs this took the form of a Data and AI Governance Framework naming the Chief Data and Analytics Officer as the Accountable AI Official.

## What the work involves

- We write the data and AI governance framework, including decision rights and accountabilities.
- We develop AI policy, guidelines and an acceptable use position.
- We design AI Impact Assessment pathways and risk screening.
- We set up the AI register and the ethical review process.
- We align to the APS AI Plan, the WoG AI Policy and the PSPF in government, and to the Privacy Act, your regulator and your board everywhere else.
- We support your Accountable AI Official and design the governance body around them.

## Why we work this way

- Governance that ignores proportionality gets bypassed by the people it applies to, or it becomes theatre.
- Cyber, legal, privacy and ethics have to be design decisions, because retrofitting them costs far more than including them.
- We have drafted the instruments regulators and auditors ask to see, and companies and not-for-profits get governance built to that same public sector safety standard.
- We arrive with working templates for impact assessments, registers, risk tiers and review thresholds, so nobody starts from a blank page.

## By maturity stage

### Exploring

You are aware of AI but have no strategy yet.

- We set initial guardrails.
- We write an acceptable use policy.

### Developing

Your strategy is forming and the first use cases are running.

- We build the governance framework.
- We design the AIA pathway.
- We stand up the AI register.

### Scaling

AI is running and you are ready to expand and govern it.

- We extend assurance across the enterprise.
- We put monitoring in place.
- We get you ready for audit.