Full-service AI transformation — from strategy to running, governed systems What we do →

NSW AI Assessment Framework

The AIAF is mandatory. Self-assessed. Centrally unverified.

Three fixed-scope services built on NAIM V2.1's 18-obligation ledger — from a three-week rapid assessment to an annual assurance retainer. Every NSW Government agency already carries this obligation; the gap between "mandatory" and "verified" is where an assurance failure becomes a headline, and it's the gap these services close.

Three Offers

Health Check lands. Programme delivers. Retainer retains.

Each deliverable is an artefact your agency receives, not an activity performed. Offer 1 is deliverable today — the practitioner is the product, and the MaturityOne module strengthens rather than blocks it.

Offer 1 · Available now

AIAF Health Check

Three weeks, fixed fee. A rapid assessment against a reduced government dimension set, obligation ledger rapid status, a Rating Validation sample, and a top-ten exposure register — the single artefact most likely to reach a risk committee. Explicitly non-attestable; converts directly into a full baseline under the Compliance Programme.

You walk away withObligation ledger rapid status · Rating Validation sample · top-ten exposure register

DURATION: 3 WEEKS · FIXED FEE, PRICE ON APPLICATION

Offer 2 · Availability tracks the MaturityOne build

Compliance Programme

Twelve to sixteen weeks. Phases 0 and 1 of NAIM V2.1 to closure: full assessment factory across your system inventory, assurance orchestration (PIA, HRIA, cyber review, legal-basis register), the Trigger Register armed, the Cross-Agency Accountability Annex where decision chains cross agency boundaries, and AIRC referral packs for High/Critical systems.

You walk away withFull obligation ledger closure · armed Trigger Register · AIRC referral pack(s)

DURATION: 12–16 WEEKS · FIXED FEE, PRICE ON APPLICATION

Offer 3 · Availability tracks the MaturityOne build

Assurance Retainer

Annual. Ongoing Trigger Register watch, quarterly telemetry reporting, scheduled re-scores, the Executive Attestation Pack at each Gate 4 cycle, and sector benchmarking against comparable agencies.

You walk away withQuarterly telemetry · scheduled re-scores · annual Executive Attestation Pack

DURATION: ANNUAL · PRICE ON APPLICATION

Fixed-fee means fixed-fee — the basis is stated for every offer, and the exact figure is scoped in a discovery conversation against your agency's system count and risk profile.

Why This Is Urgent

The rating discretion is the gap

Three-tier assurance: universal self-assessment, central review by exception, financial-threshold oversight. The weakness sits between tiers one and two — your agency's own rating decides whether the centre ever sees the system. That's the discretion point an independent second line exists to close.

ASIC v FIIG Securities [2026] — the first Federal Court civil penalty for cyber and control failures under s912A general obligations — is the shape of exposure this framework is designed to prevent: controls that would have prevented a multi-million-dollar penalty cost a fraction of that to implement. The AIAF's self-assessment gap is the same pattern, one regulatory step earlier.

Start with the Health Check.

Three weeks, fixed fee, available now — no booking widget, direct contact with the founder.

Enquire about the Health Check →