Three ways I can help.

Your risk register lives in a spreadsheet one person owns. Your incident forms are on paper, or in a mailbox. I rebuild these as working systems inside the Microsoft 365 your organisation already licences — SharePoint, Lists, Forms, Power Automate — so records are in one place, reviews chase themselves, and reporting does not depend on anyone remembering.

• Risk registers with owners, ratings, treatments and review cycles
• Incident, hazard and near-miss reporting staff can complete on a phone
• WHS registers, corrective actions and closure tracking
• Compliance obligation registers and audit evidence libraries
• Board and committee reporting generated from live data

Approvals chased by email. Reminders nobody sends. The same report rebuilt by hand every month. I automate the routine parts so your team spends its time on judgement rather than administration — and where AI genuinely helps, I set it up against the Australian Government’s Guidance for AI Adoption rather than switching it on and hoping.

• Automated routing, escalation and overdue-action reminders
• Scheduled reports and dashboards that build themselves
• AI-assisted summarising, triage and drafting, with human review built in
• Privacy, accuracy and record-keeping controls around any AI you adopt
• Practical guardrails your board can actually understand

Policy reviews that quietly lapse. Audit evidence gathered in a panic the week before. A framework written by a consultant three years ago that nobody has opened since. I design frameworks and procedures to fit your actual obligations and your actual capacity — then put them into your systems, so they stay alive.

• Risk management frameworks, appetite statements and registers
• Policy libraries with version control and automated review cycles
• Incident, hazard and WHS procedures
• Internal audit programs and assurance mapping
• Business continuity and incident response planning