Which framework first

Thesis

Most small organisations don’t need ISO 42001 certification first. Australia’s Guidance for AI Adoption is a lighter starting point, and 42001 matters when a buyer, funder or tender asks for it. Choose by who is asking, not by what sounds most serious.

Reader

A scale-up founder whose first government tender mentions AI governance; an NfP CEO whose funder has started asking about AI.

Opening failure

An organisation spends months building toward certification that nobody asked for, while the one customer who did ask only wanted a credible answer to five questions.

Beats

1. Certification is an answer to someone else’s question. Find out whose question it is.
2. The ladder in practice: the national guidance as foundations, 42001 as a management system, certification as third-party proof.
3. A short crosswalk: where the guidance’s practices land in 42001 clauses, so early work isn’t wasted.
4. When to stop. Some organisations should stop at step 2, and that is good advice, not a lost sale.

Research to do

• Confirm the current structure of the Guidance for AI Adoption (National AI Centre, released Oct 2025 as I understand it) and any official mapping to ISO 42001.
• Check what Commonwealth and state procurement currently asks AI suppliers for.
• Check whether any major Australian funders ask grantees about AI use.

Market angle

Scale-up: the tender question. NfP: the funder question. SMB: usually neither yet, so start with the guidance.

What you can do on Monday

Ask your biggest customer or funder what they would want to see. Write down the answer.