Insights
Practical thinking on transformation, delivery, AI governance and the disciplines that make change stick.
AI Governance & Risk
What APRA, ASIC and government now expect, and what it means for your board.
The government has now told APRA and ASIC to prioritise AI - here's what that changes
On 16 July 2026, the Treasurer issued updated Statements of Expectations to APRA and ASIC.
Read article AI Governance & RiskYour AI supply chain is longer than you think
When a regulated entity deploys an AI capability, it rarely has full visibility of what sits beneath it.
Read article AI Governance & RiskBoard literacy on AI: what effective oversight actually requires
APRA has set a clear expectation: boards of regulated entities must maintain sufficient understanding of AI to set strategic direction and provide effective challenge and oversight.
Read article AI Governance & RiskAssurance hasn't caught up with AI - and regulators have noticed
Traditional assurance methods were built for systems that behave consistently. AI does not.
Read article AI Governance & RiskAI governance is not just another technology risk - and treating it that way will cost you
APRA's most pointed observation from its late 2025 targeted engagement was that regulated entities are treating AI risk as just another technology risk.
Read article AI Governance & RiskCyber resilience fundamentals: what ASIC and APRA expect you to have right
ASIC's May 2026 open letter to licensees and market participants did not introduce new cyber expectations.
Read article AI Governance & RiskWhat regulators are actually asking for on AI governance - and why most entities aren't ready
In April and May 2026, APRA and ASIC wrote directly to regulated entities. APRA's message: AI adoption is accelerating, but governance is not keeping pace.
Read article