Consultants Tip: Most businesses can't manage all 6 pillars at once.

We recommend starting with Pillar 1 (Shadow AI Discovery) and Pillar 4 (The Playbook) then layering in Pillar 2 (Impact Assessments) for the higher-risk tools.

The NAIC ‘Essential 6’ - Foundations Checklist

Taking the first steps towards your first AI Risk Management framework?

The National AI Centre (NAIC) Essential 6 offers a structured starting point for businesses looking to formalise their approach to responsible AI Risk Management, with an introductory ‘Foundations’ version.

Designed for organisations with < 50 staff, the checklist will help lay the groundwork for what your organisation should expect from its first AI Risk Management System.

This checklist focuses on the core Essential Six pillars:

  1. Assigning accountability,

  2. Assessing stakeholder impacts,

  3. Managing technical risks,

  4. Sharing information,

  5. Monitoring performance,

  6. And ensuring human oversight.

Implementing these key principles ensures your organisation has the beginnings of necessary compliance controls to keep AI deployment safe, ethical and fully managed.