Working observations from inside the engagements. Specific. Grounded. Without prediction theatre.
The methodology is the constant. The application evolves with the category that matters next. These notes track what we are seeing in the work.
On 30 April 2026, APRA wrote to every regulated bank, insurer, and super fund in Australia, telling boards that AI literacy is now a minimum expectation — not a development goal. The language is unambiguous: boards must maintain sufficient understanding and literacy with respect to AI in order to set strategic direction and provide effective challenge and oversight. What APRA has not done is define what literacy actually looks like in practice. That interpretive work falls to directors themselves.
Many will read "literacy" and consider whether they need to do another course or briefing. Those have their place — but they will not produce what APRA is really describing. Real literacy is lived, not learned. It is the judgement that comes from having done the work.
Read the full piece →Downloadable briefs, LinkedIn carousels, and structured perspectives from the Mycelium AI Security and AI Agents practices. Updated as the work produces new pattern observations.
88% of organisations now use AI. 63% have no governance policies in place. A board-ready brief on the AI security gap and the regulatory pressure heading into 10 December 2026.
Download the carousel →The Health Check at a glance. 14 dimensions. 4 pillars. The four-week engagement that produces a defensible picture of where your AI risk actually sits — before the Privacy Act deadline.
Download the brief →Cross-project status synthesis, risk surfacing from delivery data, decision-log maintenance. Departmental AI agents built against the mission, governed by the people who use them.
Download the brief →The five conditions that determine whether transformation lands or stalls — applied to AI adoption, observed across thirty years of senior leadership rooms.
ForthcomingNew Mycelium perspectives are published quarterly. No marketing automation. No webinar funnels. Just the field notes — when there is something worth sending.
Request to be on the list