Aona advisory services
AI Governance Assessment
Make your next AI governance decision with a clear view of the evidence. Aona reviews your policies, controls and gaps, then helps your team prioritise what to do next.
Available as a standalone service.
When to assess
When your AI governance needs a clearer direction.
Your policy needs a review
Your framework needs to reflect the AI tools, data and decisions in use today.
AI use is expanding
New teams and use cases need clear ownership, approvals and proportionate controls.
Leadership needs priorities
You need an evidence-backed view of the gaps and the work to prioritise.
What you receive
Findings your team can put to work.
Agree the outputs upfront, then walk through the findings with your team.
Summary for leadership
The main findings, why they matter and where attention is needed.
Evidence-backed gap register
What was reviewed, what is missing and the evidence supporting each finding.
Prioritised action plan
Recommended next steps, suggested owners and a practical order of work.
Unclear AI approval ownership
- Evidence
- The policy and selected approval records identify different decision-makers.
- Recommended action
- Align the accountable owner and approval path, then update the policy and records.
What we review
A policy review grounded in real AI use.
We connect your framework with the tools people use, the data they handle and the controls applied in practice.
- Policy fit
- AI tools, data and decisions covered by your framework
- Accountability
- Responsibilities, ownership and approval paths
- Controls in practice
- Selected examples of how controls are implemented
- Evidence and oversight
- Training, monitoring and incident records
Relevant reference points
Put the gaps in context.
Compare the agreed evidence with references that fit your sector, use cases and risks. We agree the frameworks, guidance and versions before the review.
Explore the NIST AI RMF gap analysis templateAustralian financial services
APRA and ASIC guidance, where relevant to your organisation.
APRA AI letterASIC Report 798Aona's financial services guidePrivacy
Applicable privacy obligations and personal-information handling.
OAIC guidance on AI productsAI governance
Frameworks and Australian guidance selected for your use cases.
NIST AI RMFISO/IEC 42001Australian Guidance for AI AdoptionWhy Aona
Built around the reality of AI at work.
Aona focuses on workforce AI security: the tools people use, the data they handle and the policies applied along the way. That practical perspective connects governance decisions with the controls your team needs.
Working with your team
One assessment. Clear stages.
Agree scope
Confirm use cases, stakeholders, evidence, references and outputs, with fees and timing agreed upfront.
Review evidence
Examine policies and records, speak with your team and review selected implementation examples.
Set priorities
Validate the findings together, then recommend actions, owners and an order of work.
Scope, fees and timing
Start with the decision you need to make.
In the scoping call, we discuss your AI use, current framework and the teams involved. Together, we agree how broad and deep the review needs to be.
Scope, evidence needs, outputs, fees and timing are confirmed before work begins.
Review Aona's trust informationA few practical questions
Before you begin.
- Can you review an existing framework?
- Yes. We can start with your current policies and compare them with references agreed for the review.
- Do we need to buy the Aona platform?
- No. The assessment is available as a standalone service.
- Is this certification or legal advice?
- It is an advisory review based on agreed evidence and point-in-time samples. It does not provide certification, legal advice, regulatory approval or assurance of ongoing control performance.
- Does it include implementation or ongoing monitoring?
- Any implementation support or ongoing monitoring is scoped and agreed separately.
Next step
Know where to focus next.
Bring your AI use, governance questions and the decisions ahead. Let's scope a useful assessment together.