OUR APPROACH

Our 5A Approach to AI Governance

Understand your AI risks, establish clear accountability and put practical governance into everyday work.

Our delivery approach draws on recognised standards and guidance for AI management, risk and impact assessment, information security and privacy, including ISO/IEC 42001, 23894 and 42005, the NIST AI Risk Management Framework and its Generative AI Profile, and ISO/IEC 27001, 27002 and 27701. We also consider Australia’s National AI Plan, Australian Guidance for AI Adoption, OAIC AI and privacy impact assessment guidance, and relevant industry requirements. For government engagements, we also consider the Australian Government’s Policy for the Responsible Use of AI in Government (DTA 2.0), where applicable. These references are selected and applied according to your organisation’s AI use, risks, sector and agreed engagement scope.

The stages are iterative. Material changes may return the work to Align or Assess. Engagements can cover the stages you need; purchasing all five is not required.

01 · Align

Clarify direction, priorities and accountability

Value to your organisation

A shared understanding of priorities and responsibility, so the next steps support your business.

When this helps

AI use is emerging across your organisation, but priorities and responsibilities are not yet clear. You need a shared starting point before investing further.

Questions we help answer

Where should we focus first?
What should be in scope?
Who needs to own AI-related decisions?

Our support

Business priorities and AI governance objectives.
Agreed scope and leadership alignment.
Clear ownership and a proportionate direction.

02 · Assess

Understand the risks that matter

Value to your organisation

A clearer view of exposure and priorities, supporting informed decisions about AI use.

When this helps

AI is already being used or proposed, but its impacts and existing safeguards are not well understood. You need to identify what deserves attention first.

Questions we help answer

How is AI being used in our organisation?
Where could it affect people, information or decisions?
Which risks should we address first?

Our support

AI use and business context review.
Risk, impact and governance gap assessment.
Proportionate priorities for improvement.

03 · Architect

Establish governance that fits your organisation

Value to your organisation

Clearer expectations and more consistent decisions about AI use.

When this helps

AI use is growing, but policies, responsibilities and approval arrangements are inconsistent. Governance needs to fit the way your organisation works.

Questions we help answer

Who should make decisions about AI use?
What rules do staff need?
How can governance fit existing business processes?

Our support

AI policies and practical guidance.
Clear responsibilities and decision pathways.
Proportionate governance and oversight arrangements.

04 · Adopt

Put governance into everyday practice

Value to your organisation

Staff who understand their responsibilities and governance arrangements that can be used in real work.

When this helps

Policies and governance arrangements are taking shape, but people need support to apply them. Implementation must work in everyday operations.

Questions we help answer

How do we put agreed policies into practice?
What do different staff roles need to understand?
How do we know people can use the arrangements effectively?

Our support

Practical implementation and adoption support.
Role-based staff training and guidance.
Validation of practical use and operational handover.

05 · Assure

Keep governance effective as AI evolves

Value to your organisation

Continued visibility of AI governance and a practical basis for improvement as your organisation changes.

When this helps

AI tools, uses and business needs change over time. Existing governance needs regular attention to remain relevant and effective.

Questions we help answer

Are our governance arrangements working?
What changes need attention?
Where should we improve next?

Our support

Governance effectiveness review.
Support with emerging issues and changing AI use.
Ongoing oversight and continual improvement.

ILLUSTRATIVE EXAMPLES

What practical governance looks like

Illustrative examples of the areas we support. Detailed methods and engagement-specific materials are discussed privately.

Illustrative Example

AI Use Register

Make uses, owners and review points visible.

Illustrative Example

Risk & Control Matrix

Connect a risk with a practical control and evidence.

Illustrative Example

Approval & Human Review Workflow

Show who decides and when work must stop.

Illustrative Example

Management Review Summary

Turn operating evidence into management decisions.

Illustrative Example

Document review with meaningful human oversight

A growing organisation wants to introduce AI into everyday work while maintaining clear accountability. Our approach helps it understand the risks, agree proportionate governance and support confident adoption. This is a fictional illustration, not a client case study.

Service boundaries

5A is our delivery approach, not an official ISO framework. It does not represent certification, independent assurance or a guarantee of compliance.

Service Scope / Disclaimer ↗

Email Us

Tell us about your organisation, how you use AI, your main concern and any relevant timeframe. We can discuss a suitable starting point and scope.

[email protected]

Please do not include confidential documents or sensitive personal information in your initial email.