§8 · Lane 5 — AU AI Governance Frameworks & Academic Anchors

A Director's Guide to AI Governance (AICD / HTI) the board-readable spine for AICD's eight elements

AICD / HTI (2024) · AICD / HTI

Practitioner Tier 1 Lane 5 Stable URL
Read on publisher · Stable URL

Bibliographic data

Title
A Director's Guide to AI Governance (AICD / HTI, 2024)
Authors / Issuing body
Mark Rigotti MAICD (CEO and Managing Director, AICD); Professor Nicholas Davis MAICD (Co-Director, HTI at UTS)
Year
2024
Designation
Practitioner
Licence
Stable URL — refer to publisher for full licence terms.

How to cite

AICD / HTI (2024). A Director's Guide to AI Governance (AICD / HTI, 2024). https://www.aicd.com.au/risk-management/framework/ai-governance/a-directors-guide-to-ai-governance.html.

Joint AICD–HTI board-level framework for AI governance, structured as the "eight elements of safe and responsible AI governance" — the AU canonical board-readable AI governance reference, designed to sit alongside AS ISO/IEC 42001:2023 (operational standard) and the AU Government's mandatory guardrails work.

Why it matters for NETEVO

The Australian Institute of Company Directors is the canonical professional body for AU directors, and this joint AICD–HTI guide (2024) is the most directly usable board-level AI governance reference for AU listed and pre-listing companies. It is designed to sit alongside AS ISO/IEC 42001:2023 (the operational standard) and the AU Government's mandatory guardrails work. Three features give it that standing.

AICD-authored, board-level framing. Most board-level AI governance content arrives in vendor vocabulary and must be translated before a board can work with it. This guide is the inverse: written by the directors' own professional body, in the vocabulary of directors' duties, oversight and assurance, it serves as the natural common reference between a board and the teams that build and operate its AI controls.

The eight elements map onto AS ISO/IEC 42001 Annex A almost cleanly. Section 2 of the guide names eight elements of safe and responsible AI governance: roles and responsibilities; governance structures; people, skills and culture; principles, policies and strategy; practices, processes and controls; supporting infrastructure; stakeholder engagement and impact assessment; and monitoring, reporting and evaluation. These line up with the Annex A control families in AS ISO/IEC 42001:2023. Read together, the two documents give a single line of sight: the guide names the elements a board must govern, and the standard specifies the controls that operationalise them. The question that remains for any organisation is whether those controls are engineered or exist only on paper.

Section 1.4 is titled "Traditional IT governance may not be fit-for-purpose for AI" — a verbatim AICD position. The professional body of AU directors has formally stated that traditional IT-GRC frameworks do not work for AI governance. A governance approach that retrofits IT-GRC tooling for AI must now defend itself against an AICD-authored position to the contrary.

Where NETEVO applies this

Related audiences