AI Governance for Tertiary Providers
How is AI being used across your provider, and has your governance kept pace?
In most tertiary providers, AI arrived through the tools staff already use. Marketing drafts copy with it. Enrolment teams triage enquiries with it. Administrators summarise documents with it. Assessment and student support staff are beginning to lean on it.
Little of that requires a board decision to happen. Which raises a question worth asking at governance level: across your own provider, where is AI now in use, who decided, and what oversight sits behind it?
Often the honest answer is that no one is quite sure. That gap is where Ethos Advisory works. Ethos gives boards and senior leadership an independent, evidence based view of how AI is actually being used across the organisation, where the exposure sits, and what oversight needs to be in place.
Why this matters now for PTEs and ITPs
Under iQAF, all non-university providers, including Industry Skills Boards, undertake an annual organisational self review and submit a summary report to NZQA, followed by a discussion of the improvement plan.
iQAF does not name AI. It does not have to. The self-review asks a provider to account for how it manages quality and risk across its operation, and the quality management system is where that management is documented. In our view, a provider that has adopted AI across enrolment, assessment support, and the handling of learner data now has AI sitting inside both. It is better described in the self-review, and designed into the system, than discovered later.
These are timing markers, not a threat. The point is that the framework now asks providers to evidence how they manage quality and risk, and AI has become part of both before most boards have looked at it.
What an AI Governance Readiness Review gives your board
An independent assessment of where AI is in use across the provider, including tools adopted informally at team level.
A clear view of governance gaps and the operational, regulatory, and reputational exposure they create, in the specific context of a tertiary provider.
Practical, prioritised recommendations the board and senior leadership can act on, aligned to recognised standards and to your obligations under the Privacy Act 2020.
A board ready briefing written for directors and leadership, not handed to IT.
Why providers work with Ethos
Ethos works only at the governance layer, does sells no AI tools, runs no implementation, and holds no vendor relationship. That independence serves the provider’s governance interest and nothing else.
The work is grounded in the New Zealand tertiary context: NZQA expectations, the Privacy Act 2020, and the operational reality of an owner led or lean provider where one team wears several hats.
If AI governance is on your board’s agenda, or should be, a brief conversation is a good place to start.