How to Get Actively Involved in Australian AI Policy, Governance, and Risk Management: A Practical Guide for Risk Professionals

Australian AI governance is being built in real time across government bodies, standards committees, professional associations, and consultancies. For risk professionals who want to actively contribute — not just consume — there are five concrete pathways with specific entry points, contact bodies, and named individuals. The practical guide to building influence in Australian AI policy and risk management.

Key Takeaways

Public consultations through DISR, NAIC, AISI, and DTA are the most accessible entry point — anyone can submit, no organisation required.
Standards Australia Committee IT-043 (chaired by Aurélie Jacquet) shapes ISO/IEC 42001 adoption in Australia — accessed through nominating bodies like ACS and Ai Group.
Professional bodies (RMIA, ISACA, AICD, IIA Australia, AHRI, Governance Institute) provide credibility, networks, and direct paths to committee work.
ISACA's Advanced in AI Risk (AAIR) credential and RMIA's Certified Practising Risk Manager (CPRM) are the relevant certifications.
Parliamentary submissions, AISI external review panels, and chief AI officer engagements provide ongoing routes to influence policy.
Build credibility through one or two channels first — the rest open up once you have a body of work to point to.

"情報提供のみを目的としています。この記事は法律、規制、財務または専門的なアドバイスを構成するものではありません。具体的なアドバイスについては、資格を持つ専門家にご相談ください。"

Australian AI governance is being built in real time. The National AI Plan released 2 December 2025 confirmed Australia's voluntary approach. The AI Safety Institute launched early 2026 with A$29.9M funding. Standards Australia continues to develop ISO/IEC 42001 adoption. The Digital Transformation Agency publishes evolving AI Model Clauses. Each of these processes accepts external input — and the people contributing now will shape the framework that governs every Australian organisation for the next decade. For risk professionals who want to actively contribute rather than just consume, this guide outlines five concrete pathways with specific entry points, contact bodies, and named individuals.

1. Government bodies and public consultations

The Department of Industry, Science and Resources (DISR) is the central policy coordinator for the National AI Plan 2025. It runs public consultations regularly through consult.industry.gov.au. The 2023 Safe and Responsible AI consultation received over 500 submissions, with more than 20% from individuals — you do not need to be an organisation to submit. Public submissions become part of the official record and are referenced in subsequent policy development.

The National AI Centre (NAIC) within DISR is the national focal point for AI capability building, guidance, and SME/non-profit support. NAIC publishes the Guidance for AI Adoption (AI6 framework) and actively seeks input on guidance materials. Subscribe to their mailing list at industry.gov.au/NAIC to get early notice of consultations.

The Australian AI Safety Institute (AISI) launched early 2026 and is still building its operational structure. It will need technical advisors, external reviewers for assessments, and contributors to its work programs. Watch for "expressions of interest" announcements as the institute matures. The Digital Transformation Agency (DTA) publishes the AI Model Clauses and runs the GovAI program with Chief AI Officers in every federal department since November 2025. They consult on public sector AI policy iterations.

Parliamentary inquiries provide periodic high-profile opportunities. The Senate Select Committee on Adopting AI reported in November 2024 after receiving public submissions through standard parliamentary channels. Future AI-related inquiries will follow the same process — monitor aph.gov.au/Parliamentary_Business/Committees for active inquiries.

2. Standards Australia IT-043 — The high-impact route most miss

Standards Australia Technical Committee IT-043 (Artificial Intelligence) is the most influential body in Australian AI governance that most people have never heard of. IT-043 develops Australia's position as a participating member of ISO/IEC JTC 1/SC 42 — the global AI standards body that produces ISO/IEC 42001 (AI Management Systems), ISO/IEC 23894 (AI Risk Management), and the broader family of AI standards.

The committee is chaired by Aurélie Jacquet, who also serves on the AI Expert Group at DISR and is an OECD expert on AI risks. There are multiple working groups under IT-043 (Trustworthiness was Working Group 3, convened by David Wotton from the TGA). Getting involved happens through three routes. First, through a nominating organisation: Australian Computer Society (ACS), Ai Group, Consumers' Federation of Australia, Engineers Australia, and other bodies hold IT-043 committee seats. Ai Group alone holds approximately 350 committee seats across Standards Australia, represented by 250 individuals. Email standards@acs.org.au or info@aigroup.com.au to express interest. Second, as an individual contributor through public comment periods — every draft standard goes through public consultation before publication. Third, by joining a working group, which is the fastest path to substantive influence on specific standards.

3. Professional bodies — Building credibility and access

Risk Management Institute of Australasia (RMIA) is the peak risk management body in the Asia-Pacific region with state chapters across Australia, Special Interest Groups, an annual Risk Conference, and a mentorship program. RMIA is actively developing AI risk content and certification pathways. Professional membership (MRMIA) and Certified Practising Risk Manager (CPRM) are the standard credentials. Contact: pdp@rmia.org.au.

ISACA local chapters (Sydney, Melbourne, Brisbane, Perth) provide direct access to the audit, governance, and risk community. ISACA launched the Advanced in AI Risk (AAIR) credential in beta in 2025 — designed specifically for experienced IT risk professionals managing emerging AI challenges. Chapter events put you in front of every Big 4 risk practice and APRA-regulated bank's risk teams.

The Australian Institute of Company Directors (AICD) runs board-focused AI governance courses and publishes director-level AI guidance. Contributing to AICD content or speaking at AICD events positions you in front of board members across the economy. Institute of Internal Auditors Australia (IIA Australia) is building AI audit guidance — directly relevant given the increasing audit focus on AI systems. Governance Institute of Australia publishes governance research and runs short courses with active AI focus.

Australian Information Industry Association (AIIA) is the peak ICT industry body and engages directly with government on AI policy through position papers and roundtables. Australian HR Institute (AHRI) is shaping AI guidance for workforce decisions, increasingly important given Privacy Act ADM obligations from 10 December 2026.

4. The direct approach — Specific people to engage

Some named individuals shape Australian AI governance disproportionately. Aurélie Jacquet (Chair of Standards Australia IT-043, member of the DISR AI Expert Group, OECD AI risk expert) is the central node in Australian AI standards. LinkedIn is the appropriate channel. Chief AI Officers in federal departments — every department now has one under the GovAI initiative since November 2025 — provide direct access to government AI implementation thinking.

Australian law firms with leading AI practices publish thought leadership and frequently engage external practitioners on client matters: MinterEllison, Clayton Utz, King & Wood Mallesons (KWM), Bird & Bird Australia, Corrs Chambers Westgarth, Norton Rose Fulbright, and Allens. Engaging through commentary on their publications or attending their client briefings creates substantive professional relationships.

Australian AI governance and assurance firms (Aicura, Protecht for GRC platforms, Atturra, Mantel Group) and the Big 4 risk advisory practices (Deloitte, KPMG, EY, PwC) all run external advisor and contractor arrangements. Engaging with these firms — either as a contributor, speaker, or potential partner — accelerates network development.

5. The practical sequence

For a risk professional starting from a current corporate role, the right sequence runs in stages. Months 1-2: join RMIA at Professional membership level and attend chapter events; join ISACA local chapter and review the AAIR credential; subscribe to NAIC and DISR mailing lists; set up Google Alerts for "Australia AI consultation" and "Standards Australia AI". Months 2-4: submit a public response to any active DISR/NAIC consultation under your own name; attend RMIA's Annual Risk Conference and ISACA chapter events; connect on LinkedIn with key contacts including Aurélie Jacquet, NAIC staff, and senior risk practitioners; apply for a Standards Australia IT-043 working group seat via ACS or your professional body.

Months 4-6: approach Ai Group about IT-043 representation given their 350+ committee seats; pitch RMIA, ISACA, or AICD on a speaking slot using your published work as proof; engage with one of the Big 4 risk practices about external advisor opportunities. Months 6+: file public submissions to parliamentary inquiries when AI inquiries open; apply for AISI external review panels as they are established; consider whether a paid role with a regulator, peak body, or specialised consultancy aligns with longer-term goals.

Why credibility matters more than connections

The Australian AI governance community is small enough that everyone significant knows everyone else. Cold outreach works only if you have a body of work to point to. Public submissions under your name, articles published in trade publications, speaking slots at chapter events, and committee contributions all build the credibility that opens subsequent doors. Pick two or three channels from this guide, build a track record over six months, and the rest of the landscape opens up. The people who shape Australian AI policy in 2027 are the ones contributing today.

Primary sources: DISR — AI Consultation Process | Standards Australia | Risk Management Institute of Australasia | ISACA AAIR Credential