Home · Reference library
Reference library

The trace, in one walk.

Eight documents for Internal Audit, IRAP assessors, CROs and board sub-committees. Each carries its own version and date. One form covers all eight.
01 · What is in it

Eight documents.

Three Boardroom AI Diagnostics, four standards mappings and one anonymised evidence pack. Each entry shows the version and date of the document you receive.

Sent to a work email. No newsletter by default, no third-party sharing, one follow-up email.

DX Boardroom AI Diagnostic · sector-neutral
Six pages. Ten questions, three evidence states, a scoring rubric and eleven dated sources.
Framework v2.0 · August 2026
DX-BNK Boardroom AI Diagnostic · Banking & Mutuals
The same ten questions, read against CPS 230, CPS 220, CPS 234, ASIC REP 798 and the responsible lending obligations.
Framework v2.0 · September 2026
DX-ENG Boardroom AI Diagnostic · Energy & Utilities
The same ten questions, read against SOCI, the CIRMP rules and the energy retail obligations.
Framework v2.0 · August 2026
APRA APRA × 14-Dimension Framework
CPS 220, 230, 234 and 510 mapped to the relevant requirements, alongside APRA’s letter to industry on artificial intelligence, 30 April 2026.
Mapping v2.0 · August 2026
NIST NIST AI RMF 1.0 × 14-Dimension Framework
For boards comparing global frameworks, and for cross-border organisations.
Mapping v2.0 · August 2026
ASD ISM ISM × 14-Dimension Framework
The AI-related controls we identify in the ISM, for government, defence, critical infrastructure and IRAP-assessed environments. Mapped against the September 2026 release.
Mapping v2.1 · September 2026
OWASP OWASP LLM Top 10 × 14-Dimension Framework
The ten application-layer risks of the 2026 edition, published 4 August 2026.
Mapping v2.0 · August 2026
SAMPLE Sample evidence pack · cycle 2026–06
An anonymised published pack, built to the same structure as a live cycle.
Sample · cycle 2026–06
02 · Request access

One form, all eight documents.

Sara reads every request and replies personally with the documents attached, usually within one business day.

We do not send these to personal addresses.