Week of 20 October 2025
NAIC's updated Guidance for AI Adoption consolidates the Voluntary AI Safety Standard into 6 streamlined key practices.
Key points
- Guidance offers two tiers - Foundations for new adopters and Implementation Practices for scaling organisations - with templates included.
- Primarily targets Australian businesses, not government agencies directly, though principles align with APS AI governance frameworks.
Week of 13 October 2025
MIT AI Risk Repository used LLMs to classify 950+ AI governance documents across risk, mitigation, and sector taxonomies.
Key points
- Governance failure, security vulnerabilities, and transparency were the most-covered risk domains; AI welfare and multi-agent risks were least covered.
- US-heavy dataset limits global generalisability; Australian documents are unlikely to be well-represented in current outputs.
AI Now Institute testified to Philadelphia City Council on AI policymaking, framing it as 'people vs. corporate power'.
Key points
- The testimony reflects a growing trend of civil society organisations shaping subnational AI governance in the US.
- Limited direct relevance to Australian federal agencies; useful as a signal of AI governance discourse only.
Week of 6 October 2025
Alan Turing Institute, UK AISI, and Anthropic are collaborating to study LLM vulnerability to data poisoning attacks.
Key points
- Data poisoning research has direct relevance for Australian agencies assessing AI supply chain and procurement risks.
- The extracted text is a brief blog teaser with limited technical detail - full findings not yet available.
Week of 29 September 2025
NIST's CAISI evaluated three DeepSeek models against four US models across 19 benchmarks, finding significant US leads in performance and security.
Key points
- DeepSeek models were 12 times more susceptible to agent hijacking and responded to 94% of jailbreak attempts vs 8% for US models.
- Australian agencies using or considering DeepSeek models face security and CCP-narrative-propagation risks flagged by a peer-jurisdiction regulator.
NIST and UCLA are co-hosting a workshop on automating semiconductor quantum dot device control.
Key points
- Machine learning is one thread - applied to tuning quantum dot devices, not AI governance or policy.
- No direct relevance to Australian federal AI governance, strategy, or APS practice.
Week of 22 September 2025
CAISI worked with OpenAI and Anthropic to identify security vulnerabilities and improve AI security measurement.
Key points
- Evaluations were completed in partnership with the UK AI Security Institute, signalling ongoing Five Eyes-adjacent AI safety cooperation.
- Australia's AISI is not mentioned; this bilateral US-UK arrangement may inform where Australia sits in frontier AI security collaboration.
Week of 15 September 2025
NIST is hosting a workshop on Privacy-Enhancing Cryptography implementations in September 2025.
Key points
- The event is part of a NIST series on privacy and public auditability - not focused on AI systems.
- Limited direct relevance to Australian federal AI governance; this is a cryptography standards event.
Week of 8 September 2025
Good Ancestors' September 2025 newsletter covers major Australian and international AI governance developments across two months.
Key points
- Australian threads dominate: a national AI Act debate, six new AU-focused reports, GPT-5 oversight gaps, and calls for an Australian AISI.
- International threads include the US AI Action Plan, China's competing governance vision, EU GPAI Code of Practice, and UK AISI pre-release testing.
Week of 1 September 2025
NIST-commissioned study estimates federal IoT infrastructure investment yields a 10-20x return on investment.
Key points
- AI is noted as both a driver and beneficiary of IoT infrastructure, reinforcing the two technologies' interdependence.
- US-focused economic analysis with limited direct relevance to Australian federal AI governance or procurement decisions.
Week of 25 August 2025
The Responsible AI Index 2025, now in its fourth year, tracks RAI maturity across accountability, safety, fairness, transparency and explainability.
Key points
- Only 12% of Australian organisations are rated 'leading' in responsible AI; smaller organisations struggle with resource-intensive practices.
- A self-assessment tool accompanies the index, letting organisations benchmark their RAI maturity against peers and receive tailored guidance.
NAIC has released a free Responsible AI Self-Assessment Tool benchmarking organisations across five RAI dimensions.
Key points
- Only 12% of Australian organisations currently reach the top 'leading' maturity level, per the accompanying 2025 index.
- The tool targets businesses broadly; direct applicability to Commonwealth entities depends on how APS-specific the benchmarks are.
MIT AI Risk Repository publishes a transparent, publicly accessible deck of 13 AI risk mitigation frameworks.
Key points
- The resource consolidates academic, industry, and policy sources into a draft AI Risk Mitigation Taxonomy for governance use.
- Useful reference for APS teams building or auditing internal AI risk frameworks, though not Australia-specific.
NAIC launches a year-round AI event calendar open to organisations across Australia to submit events.
Key points
- The calendar consolidates NAIC webinars and events; AI Week 2025 runs 20–24 October.
- Low signal for APS governance practitioners - primarily a public engagement and outreach tool.
NIST has finalised SP 800-53 Rev. 5.2.0, adding three new security controls focused on software patching and resilience.
Key points
- The update targets software update management risk - not AI governance - limiting direct APS AI relevance.
- Limited direct relevance to Australian federal AI governance work; primarily a cybersecurity controls item.
Week of 18 August 2025
NIST awarded $1.8 million across 18 small businesses under its SBIR program for Phase I R&D projects.
Key points
- Two of the 18 awards are AI-focused: an adversarial prompt defence algorithm and an AI safety/explainability framework.
- Limited direct relevance to APS readers; included as context on US government AI R&D funding patterns.
NIST researchers demonstrate superconducting neural networks capable of reinforcement learning without external control.
Key points
- The hardware approach is simulation-only at this stage; physical prototypes have not yet been built.
- Fundamental hardware research with no near-term APS governance or policy implications.
Week of 4 August 2025
NIST and CAISI have developed two draft taxonomies for AI agent tool use, covering functionality and constrained access patterns.
Key points
- The taxonomies aim to create shared vocabulary across the AI supply chain - useful for procurement, risk assessment, and incident reporting.
- Australia has no equivalent published taxonomy for AI agent tools; NIST's work may inform future Australian guidance or procurement frameworks.
NAIC's Q1 2025 AI Adoption Tracker shows 82% of larger SMEs (200-500 employees) using AI, versus 33% for micro businesses.
Key points
- A new responsible AI dashboard reveals a gap between SME intentions and actual deployment of responsible AI practices.
- Primary industries and micro businesses lag significantly - awareness gaps, not just adoption gaps, are the key barrier.
Week of 28 July 2025
MIT AI Risk Repository extracted 831 mitigations from 13 frameworks into a searchable database with a four-category taxonomy.
Key points
- The taxonomy covers Governance & Oversight, Technical & Security, Operational Process, and Transparency & Accountability controls - directly mapping to APS AI governance concerns.
- Operational Process Controls and Testing & Auditing were the most frequently cited mitigations; Model Alignment was rarely mentioned despite its importance.
The Alan Turing Institute has released AutoEmulate v1.0, a Python package for building fast simulation emulators.
Key points
- AutoEmulate automates ML-based surrogate model creation, potentially reducing simulation compute costs significantly.
- Limited direct relevance to Australian AI governance or APS policy work - primarily a scientific computing tool.
Two independent investigations found no APS Code of Conduct breaches by the APS Commissioner in the Robodebt inquiry.
Key points
- This is an APS integrity and accountability item, not an AI or algorithmic governance item.
- Robodebt involved automated debt raising, but this statement concerns the Commissioner's conduct, not AI governance.
Week of 21 July 2025
Alan Turing Institute argues small language models (SLMs) remain valuable alongside frontier AI for public sector use.
Key points
- SLMs offer lower compute costs, local deployment, and reduced data-sovereignty risk - directly relevant to APS contexts.
- The extracted text is a title and subtitle only; full argument detail is unavailable for assessment.
Week of 14 July 2025
MIT AI Risk Repository's incident tracker has been updated to include all AIID incidents through 23 June 2025 (up to ID #1116).
Key points
- New features include national security impact assessment across five categories, harm severity rescaling, and Fishbone causal diagrams.
- Useful as a reference dataset for APS agencies developing AI risk registers or incident classification frameworks.
A 2022 academic framework proposes six AI risk categories specifically designed for public sector governance contexts.
Key points
- The taxonomy links technological, ethical, legal, social, economic, and informational risks to concrete governance guidelines.
- MIT AI Risk Repository blog spotlight - the underlying paper is three years old and the signal is retrospective rather than new.