The ANAO is exploring how AI may be used to improve business operations by enhancing efficiency, while ensuring quality and transparency in decision-making.

The ANAO will embrace emerging technologies — including AI — thoughtfully, while managing risk for safe and effective use. 

The ANAO Use of Artificial Intelligence Policy (the policy) outlines the conditions under which ANAO staff and contractors may use AI. This is to ensure the responsible, safe, and ethical use of AI, with the intention of:

• reducing the risk of using AI;
• enabling the highest ethical standards when using AI; and
• increasing transparency in the use of AI at the ANAO.

The policy limits the use of publicly available generative AI tools (such as ChatGPT, Bing AI, and other large language models). It outlines staff obligations regarding the use of both publicly available AI and licensed enterprise AI. The policy also sets out expectations for the use of AI in audit-related activities.

The policy is supported by existing ANAO security frameworks, policies, and guidance.

The ANAO is exploring how generative AI can enhance the audit process in a profession where human judgment and scepticism are fundamental to auditing standards. This work will continue through a trial of Microsoft Copilot, as well as by monitoring emerging trends and learning from the experiences of others within the APS and the broader public sector audit community, both in Australia and internationally.

The ANAO uses three enterprise applications that incorporate AI:

• Nuix — Nuix is an eDiscovery tool used to search large unstructured data sets. One of its features uses AI to identify shapes and words in images. The ANAO has been using Nuix prior to the introduction of this AI function and does not view the AI-powered image search as a risk.
• Adobe Acrobat — This software includes an automatic form-filling function which cannot be disabled. Given its limited use, this feature is considered low risk.
• Copilot — Microsoft Copilot is an AI-powered assistant embedded across the Microsoft 365 ecosystem — including Word, Excel, Outlook, PowerPoint, Teams, and other applications. It leverages large language models combined with the Microsoft Graph (which includes data like emails, documents, meetings, chats, and calendar events) to deliver contextually aware productivity support. The ANAO is conducting a comprehensive trial of this tool in its environment.

The ANAO actively monitors proposed changes to installed software within its IT environment — including and specifically for the introduction of new AI functions — to identify any potential risks before the software update is installed.

The ANAO is committed to the safe and responsible use of AI products. All AI tools and their applications will be carefully considered to ensure there is benefit to the technology and it can be used safely and ethically.

The ANAO does not use AI tools that interact directly with the public and considers its current use of AI within the organisation to have a low impact on the public. Given this assessment, no additional safeguards have been implemented in relation to public impact and protection.

The Executive Board of Management (EBOM) is the ANAO’s primary governing body and is responsible for overseeing the use of AI.

Any AI application identified or implemented is recorded in a register and reported to the IT Strategic Committee, a sub-committee of EBOM.

The Auditor-General approved the ANAO’s Use of Artificial Intelligence Policy.

The ANAO complies with all relevant legislation and has not identified any breaches in the use of AI.

The ANAO has:

• implemented all elements of the Digital Transformation Agency policy;
• appointed the Chief Operating Officer and Chief Digital Officer as the Accountable Officials for AI within the ANAO; and
• a program to inform all staff of the appropriate use and risks associated with the use of generative AI through an internal communications and training program, including the implementation of mandatory AI fundamentals training.

Approved for publication by Dr Caralee McLiesh PSM, Auditor-General for Australia