Service
Most AI governance stops at a set of principles. The hard part is what happens next: deciding what to invest in, implementing it in a way that can be evaluated, and keeping it under oversight once it is running. This work covers that whole path, and it treats an AI initiative as a project that can fail like any other.
Boards and executives accountable for an organisation's use of AI; public-sector leaders investing in AI under regulatory and public scrutiny; and legal, risk and audit functions that need to understand what they are being asked to approve.
A governance approach your organisation can operate without me; assessment criteria and evidence requirements for the systems you are considering; independent review of a specific AI initiative where one is in trouble; and briefings that give a board a real understanding of the decision in front of it.
In Marconi’s Mistake: Agentic Commerce and the Titanic, Dr Carlton examines why interoperability and buyer representation are separate governance questions for AI shopping agents.
Dr Carlton has written six books on AI and cybersecurity governance with Technics Publications, from principles and assessments to a practitioner's implementation workbook and an Australian standards guide, and hosts the podcast AI Governance with Dr Darryl.
A workbook that turns AI governance from a compliance burden into a delivery discipline: mapping an organisation against an AI technical standard, an implementation methodology, procurement and contract governance, and oversight across the AI lifecycle.
A guide to the state of AI governance in Australia at the time of writing: the roles of federal, state and territory government, industry, civil society and academia; Australia's AI ethics principles; and what an organisation investing in AI should be mindful of.
A second volume of summaries of published work on AI, geopolitics, regulation and technology, compiled for readers who need the substance without the reading time. A synthesis of others' work rather than original research.
A guide for leaders and practitioners to governing AI through principles, ethics and structured assessments: the history and legal setting of AI, eight guiding principles with ways to uphold each, and assessment approaches for organisations.
Cybersecurity explained for boards and executives: how the threat landscape evolved, what compliance requires, how threats differ from vulnerabilities, and what an informed executive response looks like.
Concise summaries of published research and commentary on AI from many institutions, compiled for policymakers, executives and engaged readers. A synthesis of others' work rather than original research.
You need enough governance to make the first decision well: what you are trying to achieve, what would make the system unacceptable, and how you will know. A full framework can grow from real projects; it does not have to precede them.
Yes. The review asks what the system does, what evidence the supplier can produce for its behaviour, how it was evaluated, and whether your contract and oversight give you the control you think you have.
Both, and they are inseparable in practice. A system that violates your principles is a failed project; a project that never reaches evaluation cannot be governed at all.
The governance method is jurisdiction-independent. Dr Carlton has written specifically on the Australian framework and works with organisations in several jurisdictions; the legal position in any one of them is confirmed with your legal advisers.