Skip to content

AI risk and governance

Is now the time to get your AI house in order?

Good governance will help your people use AI better and help them get the most from AI without putting your organisation, and especially the directors, at risk.

What does AI governance cover?

Shadow AI and your AI tools register

Finding out which AI tools people use at work and what for, so every tool goes on one register, ready for a decision.

AI risk assessment

The risks in how your people use AI: output nobody has checked, personal information and client data in tools nobody has vetted, and being locked in to one vendor.

AI use policies

Policies drafted from your leaders’ direction and your people’s answers, with the reason for each, and a record of who has read them.

Reporting to your board

A dated record of your tool decisions and AI policies, for your board, or for a client or supplier who asks how you use AI.

48%

of Australian employees who use AI at work say they’ve used it in ways that go against company policy

University of Melbourne and KPMG, Trust, attitudes and use of AI: A global study, 2025

How would you like to manage your AI governance?

We can lead you through it

When we lead your governance project, we make sure everything is covered off for you and help you make the right decisions for your organisation. We use The GAiGE, which means this is probably a lot less expensive than you might think, and pretty quickly, you’ll be able to take over.

Choose to have us lead the project when:

  • Your board, a regulator or a client is asking how you use AI, and you need an answer that you are confident is right.
  • You handle personal or sensitive information, where a mistake with AI could be expensive to put right.
  • You’re putting AI agents or automations in place, and they need governing from the start.
  • Nobody in-house has the time to set it up and keep it current.

Do it yourselves, with The GAiGE

For many organisations, The GAiGE is all the support you need. It keeps track of which AI tools are in use and how you’ve decided they can be used (or not), your AI policies and who has read them, and plenty more features that help make sure your AI house is in order in no time.

Try The GAiGE free for 30 days and explore all the features. No credit card needed.

Explore The GAiGE

What else would you like to know?

Are directors responsible for how AI is used in their company?

ASIC, Australia’s corporate regulator, has set out that directors’ and officers’ duties of care and diligence apply to AI: “These duties extend to the adoption, deployment and use of AI.” It adds that directors and officers should be aware of how AI is used within their companies (Source: ASIC, Report 798: Beware the gap: Governance arrangements in the face of AI innovation, 2024). The Australian Institute of Company Directors said the same in its 2026 guide for boards: overseeing AI and its risks is already part of directors’ duties under the Corporations Act (Source: Australian Institute of Company Directors and Human Technology Institute, A Director’s Guide to AI Governance, Version 2, 2026).

In practice, that starts with knowing which AI tools are in use and what for, agreeing how each can be used, and being able to show it. You can do that yourselves with The GAiGE, or with us alongside you.

What is shadow AI, and how do we find out what’s in use?

Shadow AI is people using AI tools at work that their employer doesn’t know about. The simplest way to find out is to ask. The GAiGE’s AI State of Play asks everyone which AI tools they use at work and what for, and takes each person under 10 minutes. Every tool they name goes on your AI tools register, ready for a decision, and it adds to whatever your IT team can already see on the network.

Does this cover AI agents and automations?

Yes. AI agents and automations need governing from the start: who owns each one, what it’s allowed to do, and where a person checks its work. When we build one for you, that’s part of the design.

It’s worth doing early: only 21% of companies have a mature model for governing autonomous AI agents, while 74% plan to deploy agentic AI within two years (Deloitte, The State of AI in the Enterprise, 2026).

Who would we be working with?

Colin will typically be your first point of contact. For the work itself, we agree the right team with you from our network of specialists: facilitators, AI developers, data strategists, governance experts and change managers.

How much does it cost?

We always like to start with something manageable, and because we use AI in everything we do, you’ll probably find we cost a lot less than you might expect. Let’s have a brief meeting about your specific requirements, and then we can let you know the costs. The GAiGE’s plans and their prices, set by the size of your organisation, are on its own site at thegaige.com/pricing.

Would you like us alongside you?

If you think it’s time to get your AI house in order, chat to Aimee and she’ll help you set up a first meeting.