Risk Management

30-second take Internal audit does not need to rely only on past findings, management interviews or annual risk registers to decide where to focus. A...

AI risk management is often seen as a defensive exercise, but this mindset limits business value and slows innovation. Leaders must reframe AI risk as a tool to enable success, balancing risk with opportunity through clear ownership, tailored evidence, and ongoing assurance.

The deeper lesson is that cyber risk maturity must be embedded into normal strategic, operational, supplier and technology assessments.

For boards and management teams, the deeper issue is not the technology headline. It is whether the organisation can clearly evidence how it understands its systems, suppliers, critical processes, data pathways, control environment and escalation triggers.

OAIC has published a statement on the Instructure (Canvas) cyber incident, confirming Australian education providers have been affected and directing impacted parties to the entity first for privacy complaints and response handling.

A practical AI risk governance article focused on AI agents and non-human identity risk, evidence, ownership, challenge and maturity assessment.