Assess · Solution 04
AI Governance Readiness Assessment
Find the AI already in use across your organisation, assess it against Australia's Guidance for AI Adoption, and leave with a register, a policy draft and a clear set of priorities.
- Stage
- Assess
- Timeframe
- Typically three to four weeks.
- You receive
- 6 named deliverables
- Fee
- Fixed, agreed in writing first
- Who it is for
- Organisations whose staff use generative AI tools, or whose software suppliers are switching on AI features, without agreed rules or a clear owner.
- The problem
- AI is already in use, often informally. Nobody holds a full list of where, what information goes into it, who is accountable, or how it affects the people your decisions touch.
- Scope
- AI use discovery through a short staff survey and up to six interviews.
- Assessment against the six essential practices in the National AI Centre's Guidance for AI Adoption.
- An optional lens against ISO/IEC 42001 or the NIST AI Risk Management Framework, if you ask for it.
- Review of up to five AI-enabled supplier tools.
- A check of where AI use intersects with privacy obligations, including automated decision-making disclosures.
- You receive
- AI use register, with a risk tier for each use.
- Gap assessment against the six essential practices.
- Draft AI acceptable use policy.
- Supplier AI review notes.
- Prioritised action plan.
- A briefing for your executive team or board.
- Timeframe
- Typically three to four weeks.
- Fee
- Every engagement is fixed-fee. We confirm scope and fee in writing after a free scoping call, before any work starts.
- Not included
- No certification. Only an accredited certification body can certify an AI management system; we can help you prepare.
- No technical model testing or bias auditing.
- No legal classification of systems under the EU AI Act or any other law.
AI governance is less about the technology than about decisions: which uses are allowed, who is accountable, what information may go in, and how outcomes are checked.
How it runs
- 01
Scoping call
Agree the teams and tools in scope and confirm the fee in writing.
- 02
Discovery
Staff survey and interviews to find where AI is used, sanctioned or not.
- 03
Assessment
Each use reviewed against the six practices and your privacy obligations.
- 04
Briefing
Findings, register and policy draft presented to leadership.
What usually comes next. Many clients then adopt the policy and controls through Ongoing Advisory, or pair this with a Data Governance Framework.
The first step in governing AI is knowing where it already is.
Questions
Is AI governance a legal requirement in Australia?
There is no general AI law in Australia today. The Guidance for AI Adoption is voluntary government guidance. Existing laws still apply to AI use, including privacy law, and from 10 December 2026 privacy policies must describe certain automated decisions.
Do you need access to our systems?
Not for the standard assessment. We work from surveys, interviews and the documents you choose to share.
Start with a conversation.
A free 20-minute call to understand your situation and recommend the right first step. Scope and a fixed fee are confirmed in writing before any work starts.