ISO/IEC 42001-based AI governance, built for Australian law
One practical method that turns Australian obligations and the Guidance for AI Adoption into the policies, registers and controls your teams can use and your customers recognise.
Why AI governance matters now
The first step is knowing where AI is used: the systems you build, the AI products you buy, AI features in software you already own, and the tools your staff use.
No AI Act, but plenty of law
Australia has no AI Act. Obligations come from existing law: privacy, consumer, anti-discrimination, workplace and sector rules (National AI Plan, December 2025).
Automated decisions from 10 December 2026
Privacy policies must describe automated decisions that could significantly affect people (Privacy Act, APPs 1.7 to 1.9).
Buyers are asking
The Guidance for AI Adoption (October 2025) sets six essential practices, and government and enterprise buyers are asking suppliers how they meet them.
A standard customers recognise
ISO/IEC 42001 is the international, certifiable standard for AI management systems: the structure customers and auditors recognise.
Three paths to ISO/IEC 42001, plus a quick start
Start where you are, and move up without redoing work. Each path builds on the last.
ADM Readiness Check
Find automated decisions and draft privacy policy wording before 10 December 2026. 1 to 2 weeks.
AI Governance Sprint
Path A, Aligned. Policies, register, assessments and 12 core controls for up to three AI systems. 2 to 4 weeks.
AIMS Build
Path B, Ready. A full ISO/IEC 42001 management system, with internal audit and management review. 3 to 6 months.
Certification Readiness
Path C, Certified. Audit preparation alongside your accredited certification body. 2 to 3 months.
Governance that matches your risk, not a template
One standard-based method
ISO/IEC 42001 structure, one risk scale and one ID scheme, so results are consistent whoever runs the assessment.
Built for Australian law
The Privacy Act and the automated decisions duty, the Guidance for AI Adoption (AI6) and sector rules, built into every register, assessment and policy.
Proportionate
Three paths and system tiers, so effort matches risk. Not every AI system needs the same level of oversight.
Ready-to-use toolkit
Practical templates your teams can actually use, delivered by CentryAI and partners the same way every time.
Not sure where to start?
Take the free 10-minute assessment for an instant score, your priority gaps and a suggested path. Or book a 30-minute discovery call and we will confirm which path fits and what is in scope.