Policy & Governance

This section explains how laws, directions, policy, standards and research affect consequential institutional work. Coverage includes Australian and international material, particularly OECD research, alongside DataMPowered's published policy contributions.

Entries are grouped as Requirements & Guidance, Governance in Practice, or DataMPowered Policy Contributions. The collection is growing; only verified briefings and canonical research links are listed. This is not legal advice.

All jurisdictions Australia International

All types Requirements & Guidance Governance in Practice DataMPowered Policy Contributions

AustraliaGovernance in Practice

AI agent identity, access and institutional authority

ASD ISM system-access guidance requires a unique identity per AI agent (ISM-2133) and an organisation-wide AI agent register (ISM-2134). Authentication and access control are foundations; they do not establish authority for a particular institutional act.

ISM Guidelines for system access (AI agent controls) · Australian Signals Directorate (Australian Cyber Security Centre)

Read briefing