{"slug":"australia-vaiss-accountability-and-risk-management","id":"AIPT-OBL-0001","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0001","title":"Establish accountability processes and a risk-management process (guardrails 1 and 2)","short_title":"Accountability and risk management","category":"governance_accountability","summary":"Guardrail 1 asks organisations to set up accountability processes including governance, internal capability and a strategy for regulatory compliance; guardrail 2 asks for a risk-management process to identify and mitigate risks across the AI lifecycle.\n","practical_action":"Adopt an AI policy, assign an accountable owner and run per-use-case risk assessments.","is_binding":false,"applies_from":null,"section":null,"source_reference":"Guardrails 1 and 2","official_source_url":"https://www.industry.gov.au/publications/voluntary-ai-safety-standard","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":"Bhaskar Bhatt","actors":["provider","deployer"],"sectors":["cross_sector"],"use_cases":["public_services","generative_ai"],"applicability":[{"description":"Voluntary for all Australian organisations using AI.","actors":["deployer","provider"],"conditions":null}],"evidence_examples":[{"title":"AI accountability and risk-management documentation","description":null,"artifact_type":"document"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clauses 5 and 6","note":"The standard states it is aligned with ISO/IEC 42001 and the NIST AI RMF.","confidence_level":"high","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN and MAP","note":"Original editorial mapping.","confidence_level":"high","is_original":true}],"controls":[{"slug":"ai-governance-policy-and-accountability","title":"AI governance policy and accountability structure","kind":"policy","relationship":"satisfies","note":"Guardrail 1: accountable owner, policy and compliance strategy.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-governance-policy-and-accountability"},{"slug":"ai-risk-assessment","title":"AI risk assessment and lifecycle risk register","kind":"process","relationship":"satisfies","note":"Guardrail 2: per-use-case lifecycle risk process.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-risk-assessment"}],"url":"https://aipolicytracker.org/obligations/australia-vaiss-accountability-and-risk-management","policy":{"slug":"australia-voluntary-ai-safety-standard","title":"Voluntary AI Safety Standard (Australia)","status":"voluntary_standard","jurisdiction":"australia","url":"https://aipolicytracker.org/policies/australia-voluntary-ai-safety-standard"}}