Meriam CONSULTING
Discuss an AI system isaiah@meriamconsulting.com.au +61 414 848 385

Services / State frameworks / Queensland

Queensland FAIRA support

Facilitation and documentation support for Queensland agency teams preparing a Foundational AI Risk Assessment, from components analysis to controls.

What FAIRA is

The Foundational artificial intelligence risk assessment (FAIRA) framework is the Queensland Government's structured method for describing an AI solution and assessing its benefits and risks. Version 2.0.0 took effect in September 2026.1

Under the Queensland Government Enterprise Architecture (QGEA) Artificial intelligence governance policy (version 2.0.0, August 2026), agencies must establish AI governance arrangements with regard to ISO/IEC 38507, and must align to Australia's AI Ethics Principles by applying the FAIRA. When evaluating AI solutions, agencies prepare a FAIRA or an agreed equivalent. A shorter FAIRA LITE may be used for low-risk use cases such as proofs of concept, trials and exploratory activities.2

What a FAIRA covers

  • Part A, components analysis. The system's technical components, design, human interaction and the context it is implemented in.
  • Part B, values assessment. Benefits and risks across twelve domains of AI risk aligned to the National framework for the assurance of AI in government, managed through the agency's risk register.
  • Part C, controls. Reference controls for AI risks, drawing on the National AI Centre's Guidance for AI Adoption.

A FAIRA is prepared or updated when an AI system enters a new phase of its lifecycle, and reviewed when risks change. It does not replace privacy impact assessments, security threat and risk assessments, penetration testing or human rights impact assessments.23

How we support agency teams

The framework expects a FAIRA to be completed by a team of technical, policy, subject-matter and operational experts together with accountable officers, typically through collaborative workshops.1 We help that team work efficiently:

  • Workshop facilitation. Planning and running FAIRA workshops with the right people in the room.
  • Documentation. Drafting Part A and Part B from workshop outputs, system documentation and vendor information.
  • Controls. Suggesting proportionate controls informed by Part C, and linking them to your risk register.
  • Evidence and testing. Where the risk warrants it, independent technical testing to show whether key controls work.
  • Governance fit. Connecting FAIRA outputs to your AI governance arrangements and, if relevant, an ISO/IEC 42001 management system.

What stays with the agency

Endorsement and approval of a FAIRA relate to its content, not approval to deploy the AI system. Risk treatment, the decision to deploy, and decisions such as whether FAIRA LITE or an "agreed equivalent" is appropriate sit with the agency's responsible and accountable officers under its own governance arrangements.1 Meriam facilitates and prepares; we do not approve.

Related

Working across jurisdictions? See NSW AI Assessment Framework support. For a broader starting point, see the AI Governance Readiness Assessment.

Official sources (checked 11 October 2026)
  1. Foundational artificial intelligence risk assessment (FAIRA) framework, Queensland Government
  2. Artificial intelligence governance policy, QGEA
  3. FAIRA guideline, Queensland Government

This page summarises public guidance. It is not legal advice. Always confirm current requirements with the official sources and your agency.

Ready to stand behind your AI?

Start with a 20-minute conversation about the system you need to stand behind.

Discuss an AI system +61 414 848 385

Or email isaiah@meriamconsulting.com.au