AICD Director's Guide to AI Governance

This is essential reading for any company director or board member in Australia. The AICD has done something genuinely important here: they've translated AI governance from technical jargon into the language of director duties and board accountability. The eight-element framework maps directly onto what good board oversight looks like in practice—connecting oversight responsibilities to the standard of care expected under the Corporations Act—and the practical checklists calibrated for different organisation sizes make it immediately actionable regardless of whether you're running a listed company, an SME or a not-for-profit.

What sets this guide apart is its specifically Australian lens. It's written in the context of Australian corporate law, Australian regulatory expectations and the kinds of organisations AICD members govern. It references ASIC's focus on technology governance and the emerging expectation from regulators and investors that boards have active, informed AI oversight rather than passive delegation to management.

Why this matters for Australian organisations

Director liability is real and evolving. Australian courts have consistently interpreted the duty of care and diligence under section 180 of the Corporations Act in ways that require directors to stay informed about material risks—and regulators including ASIC and APRA are increasingly treating AI as exactly that. If your organisation deploys AI systems that affect customers, employees or financial outcomes, your board has a duty to oversee those systems properly.

The aftermath of major regulatory enforcement actions in Australia has demonstrated that 'we left it to management' is not a defence when things go wrong at scale. AI presents similar dynamics: it can drive decisions across thousands of customers simultaneously, with errors that compound quickly. Boards need to understand the risk profile of AI use in their organisations, and this guide provides the clearest framework for how to do that in the Australian context.

For management teams presenting AI initiatives to the board, this guide is equally important. It tells you how directors are being trained to think about AI governance. Frame your proposals using its eight elements, anticipate the questions directors will ask and demonstrate that you've addressed oversight, accountability and risk management—not just technical feasibility and commercial return.

Practical steps for adoption

• Use the appropriate checklist (SME, NFP or large company) as a standing board agenda item to identify and track governance gaps.
• Add AI to your board-level risk register, mapping current use cases against the framework's eight elements.
• Designate a named executive accountable for AI governance and establish a reporting cadence to the board.
• Incorporate the guide's directional questions into your next board review of AI-related proposals or existing deployments.
• Benchmark your AI governance posture against the eight elements annually—AI capabilities and associated risks evolve quickly.