Data & AI Governance Advisory  ·  Melbourne, Australia

Governance that works.
Not policy that sits.

Advisory and implementation for organisations where trust, privacy, and accountability to community are non-negotiable.

Start a conversation
IAPP AI Governance Professional (AIGP)
DAMA Certified Data Management Professional (CDMP)
ISO 42001 · ISO 27001 · NIST AI RMF

Practical governance,
built to last

Hands-on advisory across the full governance lifecycle — from framework design and investment cases through to implementation and cultural change.

AI Governance & Compliance

ISO 42001 implementation, AI tool evaluation frameworks, acceptable use policies, and controls for safe AI adoption in legally and ethically sensitive environments.

ISO 42001 AI Risk NIST AI RMF EU AI Act

Governance Framework Design

End-to-end data governance frameworks — enterprise policy suites, operating models, stewardship accountabilities, and decision rights aligned to DAMA DMBoK and ISO 27001.

DAMA DMBoK ISO 27001 Operating Models

Investment Cases & Board Reporting

Translating governance complexity into boardroom language — building investment logic, quantifying regulatory risk exposure, and securing executive mandate for governance programs.

Risk Quantification Board Papers ROI

Change & Capability Programs

Governance adoption programs that shift data culture — training, communities of practice, stewardship networks, and data literacy uplift across large, diverse workforces.

Change Management Data Literacy Capability Uplift

Andrew Fisher

I'm an independent data and AI governance specialist with 15+ years delivering advisory and implementation programs across government, health, utilities, higher education, and regulated professional services.

My work sits at the intersection of regulatory obligation and operational reality — designing governance frameworks that don't just satisfy auditors, but change how organisations actually handle data.

Most recently I led the data and AI governance function at a top-20 Australian law firm — securing Board endorsement and multi-year funding, achieving ISO 42001 certification, and deploying enterprise-wide Microsoft Purview classification. Before that, I built the first data governance function at a major Commonwealth regulator and advised a state health department during the pandemic response.

I work with organisations that take their obligations to community seriously. Melbourne-based, available nationally.

Credentials

AI Governance Professional (AIGP)

IAPP · 2024

Certified Data Management Professional (CDMP)

DAMA · 2020

Master of Public Administration

University of Melbourne · 2021

MS Purview · Collibra · Alation

Platform specialist

Commonwealth Security Clearance

Eligible to apply

Outcomes that matter

Governance work measured not by deliverables, but by what actually changed.

$1.5M+

Regulatory risk quantified and presented at Board level

100%

M365 data classification achieved at a top-20 Australian law firm

60+

Data sharing agreements across Victorian health system

50%

Reduction in insider risk exposure via Purview DLP controls

85%

Governance training completion across 750+ professionals

40%

Improvement in enterprise data quality metrics at a major Commonwealth regulator

Sectors served

Federal Government State Government Legal & Professional Services Health & Research Water Utilities Higher Education

Ready to build governance that actually works?

Whether you're starting from scratch, preparing for an audit, or trying to get board-level buy-in, I'd welcome a conversation.

andy76@gmail.com

Location

Melbourne, VIC  ·  Available nationally

Phone

0410 950 604

Clearance

Commonwealth security clearance eligible