Guardrails
What protects us?
- Define what stays in-house and what goes to AI
- Protect client data, IP and business reputation
- Set the rules before your team sets their own
AI Governance Methodology
Why GIST exists
The pattern repeats. A leadership team buys a tool. Then they look for a use case. Then they bolt governance on later when the legal team flags risk.
By that point the team is already using consumer ChatGPT on their phones. Client data has flowed through systems nobody mapped. The board is asked to sign off on something that's already happening.
That's how shadow AI takes root in Australian organisations. Not through bad intent. Through the wrong sequence.
GIST flips the sequence. Four pillars in this order: Guardrails, Intent, Strategy, Practical Training. Each pillar protects the next.
Without values and ethics, we fly blind.
48%
of Australian employees use AI in ways that contravene company policies.
<a href="https://www.kpmg.com.au/insights/trust-in-artificial-intelligence/" target="_blank" rel="noopener noreferrer" style={{color:"inherit",textDecoration:"underline",textDecorationColor:"var(--color-lime-dim)"}}>KPMG & University of Melbourne, Trust in AI 2025 <span aria-label="(opens in new tab)">↗</span></a>
3 in 4
Australian data leaders admit governance now lags behind AI usage growth.
<a href="https://www.kpmg.com.au/insights/ai-adoption/" target="_blank" rel="noopener noreferrer" style={{color:"inherit",textDecoration:"underline",textDecorationColor:"var(--color-lime-dim)"}}>KPMG Australia, Q1 2026 <span aria-label="(opens in new tab)">↗</span></a>
14%
of Australian companies are seeing revenue gains from AI. The global figure is 30%.
<a href="https://www.pwc.com.au/ceo-survey.html" target="_blank" rel="noopener noreferrer" style={{color:"inherit",textDecoration:"underline",textDecorationColor:"var(--color-lime-dim)"}}>PwC Australia CEO Survey 2026 <span aria-label="(opens in new tab)">↗</span></a>
The four pillars
Each pillar carries one question and three working answers. Together they form the methodology Tracy walks through with leadership teams.
What protects us?
Why are we using AI?
What is the plan?
What must we learn?
Why the sequence matters
Most failed AI rollouts aren't missing pillars. They're missing the right sequence. Three rules govern the order.
Rule One
Without them, every other pillar sits on sand. An AI policy that lands after the tools are in production is a paperwork exercise, not protection. Guardrails arrive before procurement, before pilots, before any team-level adoption.
Rule Two
Strategy without intent produces shopping lists, not plans. The four most expensive words in any AI rollout: “we should buy something.” Name the business outcome first. Pick the tools last.
Rule Three
Training a team to use a tool before its purpose is clear produces capable people doing the wrong thing well. The T stands for Practical Training, deliberately. Not just training. Training that lands on Monday morning.
Australian standards
GIST isn't fringe IP. It maps directly to the four governance documents your board, regulators and legal team already work with.
Australian Government, Department of Industry, Science and Resources, September 2024. The Standard’s ten guardrails sit under the Guardrails pillar. GIST sequences how an organisation operationalises them.
Eight principles. GIST operationalises five directly: privacy protection, reliability and safety, transparency, accountability, contestability.
AI Management Systems. GIST aligns to the lifecycle clauses around organisational context, leadership, planning and operation.
The Guardrails pillar enforces Australian Privacy Principle-aligned data handling for any AI tool that processes personal information.
In practice
The framework lives in three places across the work Tracy delivers.
60 to 90 minute sessions that reframe the AI strategy conversation for executive teams. GIST anchors the discussion. The leadership team leaves with shared language and a clear sequence to apply.
Structured phases from initial reconnaissance through to ongoing advisory. GIST anchors the methodology and the deliverable structure at every phase.
Delivered for Financial Counselling Queensland, Australian Hairdressing Council and other peak bodies. GIST is the audience takeaway, the framework attendees leave the room ready to use.
Take it with you
Pin it to a board pack. Print it for your leadership team. The framework on a single page, ready to use Monday morning.
How it fits
GIST is the methodology. HUMAN keeps the methodology honest at every level of accountability. REIMAGINE rolls it out as a change arc.
Ask each GIST pillar at five layers: Habit, Unit, Macro, Audience and Neighbourhood. The matrix shows what changes at every level of accountability.
Read more →REIMAGINE FrameworkFrom Relationships through Evolve. Built on the research in AI & U: REIMAGINE Business. The change-management work that makes any framework stick.
Read more →Common questions
GIST is Tracy Sheen’s proprietary AI governance methodology for Australian organisations. Four pillars in sequence: Guardrails (what protects us), Intent (why are we using AI), Strategy (what is the plan) and Practical Training (what must we learn).
Each pillar protects the next. The sequence is the work.
Tracy Sheen CSP. Australian AI keynote speaker. Two-time award-winning author. PSA National Board Director. 30+ years in digital and tech.
GIST is used in Tracy’s corporate strategy engagements, boardroom briefings and keynotes for peak bodies across Australia.
Most AI policies arrive after the tools are in production. By that point shadow AI is already in the organisation.
GIST sequences the work. Guardrails arrive first. Intent is named before tools are chosen. Strategy uses the intelligence already in the room. Training lands when the business knows what it is for.
Most engagements start with a 60 to 90 minute boardroom briefing that walks the leadership team through the four pillars and identifies where the organisation sits today.
Corporate engagements then run through structured phases, with the GIST sequence anchoring each phase.
The framework scales. Mid-size organisations of 30 to 300 people are the primary corporate engagement target.
Small business owners and solopreneurs apply the same four questions through the Practical AI Collective community and the AI & U: REIMAGINE Business book.
About the author
Australian AI keynote speaker and Certified Speaking Professional. Two-time award-winning author of The End of Technophobia (Business Book of the Year 2021) and AI & U: REIMAGINE Business (Australian Business Book Awards 2025 finalist). 30+ years in digital and tech, including launching SMS and the original iPhone in Australia.
AI involvement declared. This site walks the talk. Tracy works with a primary AI collaborator on strategy, document work and code, with everything reviewed and signed off in her own voice.
Discovery calls run 30 minutes. No charge. We work out whether GIST fits the conversation your board needs to have.