The Board annually approves a Governance Statement that outlines the most significant aspects of our governance arrangements and processes, which can be viewed at:

2023-24 Governance Statement

As a corporate Commonwealth entity, we comply with the Public Governance, Performance and Accountability Act 2013 (PGPA Act) to ensure the effective, efficient, economical and ethical use of our resources.

The Board articulates its expectations through 11 organisational policies that are operationalised through 15 established governance frameworks. These governance frameworks support the delivery of our corporate objectives. Reflecting a ‘3 lines’ model of risk and compliance management and assurance, they comprise the documents, structures, systems and processes through which we ensure that our legal and regulatory obligations are met, our risks are managed and there is effective governance and assurance of these activities.

The overarching Governance, Risk and Compliance (GRC) Framework directs our GRC accountabilities and actions and promotes continuous improvement across all our governance frameworks.

The Board and Executive receive regular reporting on our GRC performance.

Risk management

We support a culture of proactive risk management by embedding sound risk-management practices across our functions.

Our risk-management approach meets the requirements of section 16 of the PGPA Act and is aligned to ISO 31000:2018 Risk Management—Guidelines and the Commonwealth Risk Management Policy.

Our Risk Appetite Statement is reviewed regularly to ensure it drives effective risk management and consistent decision-making through a common understanding of the level of risk that we are willing to accept. It also articulates our need to maintain the safety of air navigation as the most important consideration while delivering value and reliable services for our customers and the aviation industry.

Compliance management

We have a fundamental responsibility to ensure ongoing compliance with our legal and regulatory obligations. Our compliance management approach is broadly aligned to ISO 37301:2021 Compliance Management Systems Guidelines.

We maintain compliance obligation registers that are supported by legislative monitoring processes, compliance management activities, and reporting.

Ethical standards and fraud control

We promote the highest standards of ethical behaviour and do not tolerate fraudulent or corrupt conduct. We maintain strong and effective fraud and corruption control arrangements consistent with section 10 of the Public Governance, Performance and Accountability Rule 2014 (PGPA Fraud Rule).

The Board and Executive monitor the implementation of our Fraud and Corruption Control Plan through regular reporting. Performance against ethical standards and fraud control are reported to the Board through the People, Culture and Remuneration Committee and the Board Audit and Risk Committee.

Our Ethics and Fraud Control Policy and the Bullying, Harassment and Discrimination Policy, supported by the Code of Conduct Policy, inform employees, contractors and consultants about our ethical standards and our approach to fraud and corruption. All alleged incidents of fraud, corruption and bribery are managed in accordance with our Handling Suspected Misconduct Procedure, as well as the Public Interest Disclosure Procedure (where alleged ‘disclosable conduct’ under the Public Interest Disclosure Act 2013 is reported). This includes investigations and any required reporting to external law enforcement agencies. We regularly review fraud risks and monitor fraud controls for effectiveness. All reasonable measures are undertaken to prevent, detect and investigate incidents of fraud and corruption.

Resilience

We demonstrate our commitment to organisational resilience through maturing our organisation’s resilience capability in partnership with internal business areas, our customers, the wider aviation industry, and government agencies. We strengthen our capability by identifying lessons from real-life responses and with exercises incorporating these lessons into our program.

During 2023–24, our annual exercise program has incorporated an all-hazards approach to resilience. Scenarios requiring more centralised coordination have been used to test the integration of multiple plans and stakeholders, strengthening the awareness and capability of leaders and the key roles responsible for crisis management.

Security

We take personnel, physical, information, and cyber security very seriously and are committed to providing a secure and resilient environment through the application of our Security Framework. This includes a risk-based approach to the dynamic security threat environment in which we operate.

Our Security Plan demonstrates how we align with the core requirements of the Australian Government’s Protective Security Policy Framework (PSPF), and meet legislative requirements and international standards specific to the aviation security sector.

Significant investment in our physical, cyber and personnel security functions have continued, as we embed security requirements into our change programs.

As an aviation industry participant, we maintain a transport security program (TSP) and an associated Aviation Security Identification Card (ASIC) program, both of which are governed by the requirements of the Department of Home Affairs (the Regulator).