Canberra just set the floor!
The Commonwealth has told its biggest cloud vendors that Australian law wins. Nothing changes for private companies today, and quite a lot changes over the next couple of years.
September 2, 2026
Blog
“Fully isolated” is a higher bar than it sounds
The internal-use carve-out in DEWR’s AI framework is real, and narrower than most providers read it. Where it runs out, the Department’s own two documents point in different directions.
August 28, 2026
You said five. The audit found twenty-eight.
What a system discovery audit actually turns up, why the gap between what executives name and what is running is so consistent, and why the tools nobody declared are the ones carrying the risk.
August 26, 2026
DEWR’s default answer is No
Since September 2025, eleven providers have applied to use AI in DEWR service delivery. As at Senate estimates in June 2026, none had been approved. The framework’s default position is no, and that costs you whether your application is weak or excellent. Here’s what boards need to ask this quarter.
August 18, 2026
Everyone Does Cyber Awareness Training. Almost Nobody Does AI Awareness Training.
Everyone runs cyber awareness training. Almost nobody runs AI awareness training, even though the strongest control in both cases is the person at the keyboard. Why the most expensive AI mistake is usually the one nobody makes, what the AI6 practices and the new APP 1.7 actually expect, and what good training covers.
August 10, 2026
You Don’t Just Need AI. You Need a REASON to Use AI.
If your organisation has decided it needs to “do something with AI” but can’t yet say what, you’re in very good company. The problem usually isn’t governance — it’s that nobody has identified a use case. Here’s how to find yours, build a real AI strategy, and govern it from day one.
August 3, 2026
Stop Pulling People Out of the River: Decision Rights and the Cost of Friction
Most organisations fix decisions downstream, through escalation and exceptions. Defining decision rights upstream cuts friction, speeds up business and makes accountability real.
July 31, 2026
Want Faster AI Adoption? Build Governance In From the Start.
We keep blaming governance for slow AI adoption and deployments. Look closer and it is rarely the controls, it is the ambiguity. Give people three things, what is trusted, who decides and when to escalate, and the re-checking stops.
July 23, 2026
You Don’t Need a Certificate to Have Real AI Governance
Every week seems to bring another headline about
July 22, 2026
How to Improve Organizational Governance
How to improve organisational governance Why Strong Governance
July 17, 2026