Mapping SFIA to IM Capability Framework

Skills Framework for the Information Age (SFIA) is a well-established framework for the digital world. It has been used in many Australian Government agencies. The mapping below shows how the Information Management (IM) Capability framework maps to SFIA capabilities. Please note the IM Capability framework is more granular than SFIA particularly around recordkeeping in an Australian context.

Information and data management

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Understands the business need to create quality information and data and capture the relevant metadata in recordkeeping systems.	No equivalence
Foundation	Can create , organise, store, retrieve, share, preserve or destroy information and data in accordance with organisational policies and procedures.
Practitioner/skilled operational	Can appropriately manage creation, accessibility, storage, retention, preservation or destruction of information and data in accordance with organisational policies and supports others in the organisation to do the same.
Management/specialist	Can manage information and data and investigates ways to improve their management in supporting organisation wide strategies.
Executive/lead	Promotes information and data management policies and strategies and allocates sufficient resources to implement them.
Executive/lead	Seeks advice from skilled information and data professionals when required.

Legislation and policy

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Understands legislation and policies relevant to information and data and can follow information and data management procedures to meet legislative requirements.	No equivalence
Practitioner/skilled operational	Can translate legislation and policies into sound information and data management practices to meet legislative requirements.	Information and data compliance	L5	Provides authoritative advice on implementing compliance controls in products, services and systems.
Management/specialist	Can interpret legislation and policies relevant to information and data management and provides advice on their implications.	Information and data compliance	L6	Develops strategies for compliance with information and data legislation
Executive/lead	Understands the impact of legislation and policies on information and data and their management and ensures these are addressed in information governance initiatives.	No equivalence
Executive/lead	Can influence the direction of information and data related legislation and policies.	No equivalence

Information and data value

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the importance of reliable and quality information and data for good business outcomes.	No equivalence
Practitioner/skilled operational	Understands the importance of reliable and quality information and data for good business outcomes.
Practitioner/skilled operational	Understands information and data are business assets that may have value beyond the life of a system.
Management/specialist	Can explain the importance of reliable and quality information and data for good business outcomes.
Management/specialist	Can make value-based decisions to manage information and data over its life.
Executive/lead	Understands the value of information and data as corporate assets that need to be managed according to their value, supported with appropriate investment and resources.
Executive/lead	Can communicate and promote the value of information and data assets.

Information and data specialist roles

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of information and data specialist roles and seeks advice from specialists when needed.	No equivalence
Practitioner/skilled operational	Understands information and data specialist roles and seeks input from specialists when needed.
Management/specialist	Can liaise with information and data specialists and seeks input from specialists when developing new or improving existing processes and systems.
Executive/lead	Can ensure information and data specialists are represented on appropriate decision-making bodies and consulted during times of change.
Executive/lead	Understands the importance of strategic interaction between all key information and data stakeholders, ie through an information and/or data governance committee.

Data Literacy

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Understands that good business decisions rely on identifying, locating, interpreting and evaluating a range of information and data sources.	No equivalence
Practitioner/skilled operational	Can identify, locate, interpret and evaluate a range of information and data types in an ethical manner, and then use that information to respond to specific questions or issues.
Management/specialist	Can provide direction on authoritative sources of information and data for research and analysis activities.
Management/specialist	Can ensure privacy and ethical considerations have been met prior to sharing or publishing information and data.
Executive/lead	Can champion data literacy by supporting and resourcing appropriate tools and continual professional development for research and analysis.
Executive/lead	Understands the privacy and ethical implications of sharing and publishing information and ensures that safeguards are in place to protect it.

Information governance

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of relevant organisational policies, frameworks and procedures.	Information management	L4	Supports the organisation to identify, catalogue and categorise information types and information repositories inline with information management strategies and practices. Enables the organisation to organise, control and discover information assets.
Foundation	Understands that information and data need to be managed within a framework that supports business goals.		L4
Practitioner/skilled operational	Understands the role of information governance and can apply appropriate frameworks, strategies and policies in the organisation.		L5	Ensures implementation of information and records management policies and standard practice.
Practitioner/skilled operational	Can conduct compliance monitoring and reporting activities for systems and practices.	Information assurance	L4	Contributes to planning and organisation of information assurance and accreditation activities. Contributes to development of and implementation of information assurance processes.
Management/specialist	Can establish links between information, data and IT governance.	No equivalence
	Can develop and implement information governance frameworks, strategies and policies.	Information management	L6	Develops organisational policies, standards and guidelines for information management
	Can plan and manage compliance monitoring and reporting activities.	Information assurance	L5	Plans, organises and conducts information assurance and accreditation of complex domain areas, cross functional ares and across the supply chain.
Executive/lead	Can endorse strategies to ensure information governance is integrated with data and IT governance and aligns with corporate governance.	Information assurance	L7	Directs the creation and review of an enterprise information assurance strategy to support the strategic requirements of the business
	Can advocate for information governance to ensure reduced risk and improved information sharing and reuse.	Information management	L7	Establishes and communicates the organisation's information management strategy
	Can advocate for, or chair, an information governance committee (or equivalent) and ensure key stakeholders are engaged.	No equivalence

Legislation and Policy

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Understands legislation and policies relevant to information and data and can follow information and data management procedures to meet legislative requirements.	No equivalence
Practitioner/skilled operational	Can translate legislation and policies into sound information and data management practices to meet legislative requirements.	Information and data compliance	L5	Provides authoritative advice on implementing compliance controls in products, services and systems.
Management/specialist	Can interpret legislation and policies relevant to information and data management and provides advice on their implications.	Information and data compliance	L6	Develops strategies for compliance with information and data legislation
Executive/lead	Understands the impact of legislation and policies on information and data and their management and ensures these are addressed in information governance initiatives.	No equivalence
Executive/lead	Can influence the direction of information and data related legislation and policies.	No equivalence

Standards and best practice

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of relevant standards that aim to improve information and data management practices.	No equivalence
Practitioner/skilled operational	Understands endorsed standards and can implement relevant procedures to improve information and data management.	Information and data compliance	L5	Provides authoritative advice on implementing compliance controls in products, services and systems.
Practitioner/skilled operational	Can assist with the development of business processes that reflect improved information and data management practices.		L5
Management/specialist	Can implement standards and best practice during the development of relevant information and data management policies and procedures and systems.		L6	Ensures that the policy and standards for compliance with information and data legislation are fit for purpose, current and correctly implemented.
Executive/lead	Can support continuous improvement by strategically implementing standards and best practice in information and data management.		L6	Develops strategies for compliance with information and data legislation.

Information and data leadership

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Understands the value of information and data and assists others to follow appropriate information and data management behaviours.	No equivalence
Practitioner/skilled operational	Can develop and deliver advice and training on information management and data governance responsibilities, principles and processes.
Management/specialist	Can advocate for, and explain, information management and data governance responsibilities, principles and processes. Can work on strategies to build an organisational culture that values information and data.
Executive/lead	Can champion and promote an organisational culture that values information and data. Can resource information and data governance training and continuing professional development.

Value of data and information

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware that information and data are corporate assets and that good business outcomes rely on maintaining authenticity, reliability, discoverability, accessibility and usability as long as needed.	No equivalence
Practitioner/skilled operational	Understands that information and data are corporate assets and that good business outcomes rely on maintaining its authenticity, reliability, discoverability, accessibility and usability as long as needed. Understands that the value of information and data may change over its life, so they should be managed accordingly, and in line with legislative requirements.
Management/specialist	Understands the value of information and data as corporate assets that need to be managed throughout their entire lifecycle. Understands that information and data may have value beyond the life of the systems in which they are created or stored, and beyond their original purpose. Can estimate the value of specific datasets and information assets and associated costs.
Executive/lead	Understands the value of information and data as corporate assets that need to be managed according to their value, supporting with appropriate investment and resources. Understands the need to communicate and promote the value of data and information assets.

Risk management

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of risks to information and data throughout its lifecycle and follows procedures to manage risk.	Risk management	L3	Undertakes basic risk management activities. Maintains documentation of risks, threats, vulnerabilities and mitigation actions.
Practitioner/skilled operational	Understands and assesses risks to information and data throughout its lifecycle, to protect it from malicious or inadvertent destruction, alteration or unauthorised release.		L4	Carries out risk management activities within a specific function, technical area or project of medium complexity.
	Understands the role of information and data governance to mitigate risk and ensure business continuity.		L5	Plans and implements complex and substantial risk management activities within a specific function, technical area, project or programme.
	Can implement risk management policies and procedures identified in information, data and IT governance artefacts.		L5
Management/specialist	Can embed risk management into information, data and IT governance artefacts and translate them into strategies to reduce risk.		L6	Plans and manages the implementation of organisation-wide risk management processes, integrating tools and techniques aligned with governance frameworks.
Management/specialist	Can manage staff who are implementing risk management strategies and activities for information and data.	No equivalence
Executive/lead	Understands the implications of new technologies and industry changes and demonstrates clear leadership to ensure information and data is managed throughout its lifecycle to ensure its continuing availability.	No equivalence
Executive/lead	Can allocate adequate resources to implement risk management and delegate authority for detailed planning and execution of risk management activities.	Risk management	L7	Provides resources to implement the organisation's risk strategy.

Information Security

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of information security needs.	Information security	L2	Contributes to identifying and addressing potential risks in security governance and compliance
Foundation	Can manage users, passwords, group memberships, access views, permissions and classify information confidentiality.		L3	Applies and maintains specific security controls as required by organisational policy and local risk assessments
Practitioner/skilled operational	Understands information security needs, regulatory requirements and frameworks.		L5	Provides advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards. Contributes to development of information security policy, standards and guidelines.
Practitioner/skilled operational	Can implement relevant controls and procedures and conduct information security risk assessments and audits.		L5	Obtains and acts on vulnerability information and conducts security risk assessments, business impact analysis and accreditation on complex information systems. Investigates major breaches of security and recommends appropriate control improvements.
Management/specialist	Can interpret regulatory requirements and information security policy to ensure information management policies and procedures are aligned to meet regulatory requirements and frameworks.		L6	Leads the provision of authoritative advice and guidance on the requirements for security controls in collaboration with subject matter experts.
Management/specialist	Can manage information security risk assessments and audits and communicate outcomes and issues to business managers and others.		L5	Obtains and acts on vulnerability information and conducts security risk assessments, business impact analysis and accreditation on complex information systems. Investigates major breaches of security and recommends appropriate control improvements.
Executive/lead	Understands information security needs and how they relate to information management processes and ensures appropriate resources are allocated to mitigate information security threats.		L7	Secures organisational resources to execute the information security strategy

Value identification, retention and destruction

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware that all information and data in all locations and formats are subject to legislation to make disposal decisions.	No equivalence
Foundation	Can implement processes to sentence information and data.
Practitioner/skilled operational	Understands the impact of legislation on managing all information and data in all locations such as business systems.
	Can manage sentencing projects and transfers.
	Can contribute to disposal authority development projects.
Management/specialist	Can assess the impact of legislation on managing all information and data in all locations such as business systems.
	Understands how disposal authorities identify an organisation's valuable information and data.
	Can manage a disposal authority development project and manage an ongoing program to reduce information holdings in accordance with legislation.
Executive/lead	Understands the application of legislation on managing all information and data and its role in identifying valuable information and data and ensuring accountability and integrity.
	Understands the risks and costs of holding information and data longer than required and is aware of the benefits of disposal.
	Can support and resource disposal processes.

Digital preservation and continuity

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware that information and data need to be maintained to continue to be complete, available and usable over time.	No equivalence
	Can use preservation tools and follow relevant procedures.
	Is aware of digital preservation standards.
Practitioner/skilled operational	Understands how to achieve digital continuity and can apply appropriate tools so information and data continue to be complete, available and usable over time.
Practitioner/skilled operational	Can apply digital preservation standards.
Management/specialist	Can assess and implement digital preservation strategies and technologies to achieve digital continuity, mitigate obsolescence and maintain access.
Management/specialist	Can develop digital preservation policies and procedures based on best practice, and manage associated projects.
Executive/lead	Can support strategies for digital preservation to achieve digital continuity and mitigate obsolescence.

Business process analysis

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of business process analysis and mapping to help identify inefficiencies and improve processes.	Business process improvement	L2	Assists in gathering data and documenting current business processes under routine supervision.
Practitioner/skilled operational	Understands business process analysis and can analyse and map business processes to identify inefficiencies and improve processes.		L4	Develops graphical models of business processes to facilitate understanding and decision-making. Analyses and designs business processes to identify alternative solutions to improve efficiency, effectiveness and exploit new technologies and automation.
	Understands the need for business process change and when to employ appropriate solutions.		L4	Recommends implementation approaches for process improvement initiatives.
	Understand when information and data should be created and captures as part of a process.	No equivalence
Management/specialist	Can lead a team to analyse and map business processes to identify inefficiencies and implement solutions for improved end-to-end business processes.	Business process improvement	L5	Selects, tailors and implements methods and tools for improving business processes at programme, project or team level.
Management/specialist	Can articulate reasons for business process change.	No equivalence
Executive/lead	Understands the need for enterprise-wide analysis and review of technology, systems and processes to achieve strategic priorities.	Business process improvement	L7	Aligns business strategies, enterprise transformation and technology strategies.
Executive/lead	Can articulate the reasons and provide support for business process change.	Business process improvement	L7	Embeds strategic business process improvement into the governance and leadership of the organisation.

Information review

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the information review process to identify information and data assets.	Asset management	L3	Applies tools, techniques and processes to create and maintain an accurate asset register.
	Can gather data for information reviews and input relevant data into information registers and data catalogues.	Asset management	L3
Practitioner/skilled operational	Understands the process and purpose of information reviews to create a shared understanding of information assets.	No equivalence
	Can coordinate information review activities including the input of data into information registers and data catalogues.	Asset management	L4	Produces and analyses registers and histories of authorised assets and verifies that all of these assets are in a known state and location.
	Can gather, analyse and report information review findings.	No equivalence
Management/specialist	Can manage information reviews and analyse gathered data to identify strategic and operational opportunities and risks.	Asset management	L5	Identifies, assesses and communicates associated risks.
	Can reuse information review data to assist in other information governance activities such as developing an information architecture.	Asset management	L5	Ensures asset controllers, infrastructure teams and the business co-ordinate and optimise value, maintain control and maintain appropriate legal compliance.
Executive/lead	Understands the strategic value of information reviews and supports the implementation of recommendations.	No equivalence

Collaboration and engagement

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of user needs and how they interact with processes and systems when creating and using information and data.	Collaboration (generic attributes)	L2	Understands the need to collaborate with their team and considers user/customer needs.
Practitioner/skilled operational	Can apply information management principles and practices to systems, procedures and processes.		L4 / L5	Engages with and contributes to the work of cross-functional teams to ensure that user/customer needs are being met throughout the deliverable/scope of work. Builds effective relationships across the organisation and with customers, suppliers and partners.
Practitioner/skilled operational	Collaborates with other business areas to ensure information management requirements are met.		L4 / L5
Management/specialist	Understands usability principles and processes and can apply them to new processes and systems.		L5	Ensures collaborative ways of working throughout all stages of work to meet user/customer needs.
	Understands that success of any information management change depends on meeting the needs of the users as well the business and ensures projects are managed accordingly.		L6	Leads collaboration with a diverse range of stakeholders across competing objectives within the organisation.
	Forges alliances with key business areas to ensure information management requirements are embedded in systems and processes.		L6	Builds strong, influential connections with key internal and external contacts at senior management/technical leader level
Executive/lead	Understands user experience is central to the successful implementation of information technologies and processes.		L7	Drives collaboration, engaging with leadership stakeholders ensuring alignment to corporate vision and strategy.
	Can support a multidisciplinary team, led by an experienced product manager, to design, build, operate and iterate a service.
	Facilitates collaboration between information management and other business areas.			Builds strong, influential relationships with customers, partners and industry leaders.

Information classification

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of information classification conventions and practices.	Analytical classification and coding	L2	Understands and applies relevant classification/labelling systems, standards and guidelines.
	Understands organisation specific information categorisation tools and how they enable access to information.		L2
	Can use and maintain information classification artefacts including enterprise taxonomies, vocabularies, classification schemes, namespaces and ontologies.		L3	Independently assigns accurate classifications/labels to a broad range of information.
Practitioner/skilled operational	Understands information classification conventions and practices.	No equivalence
	Understands organisation specific information and data categorisation tools and can advise others on their implementation.	Analytical classification and coding	L3	Advises and guides others on classification/labelling practices.
	Can design and model information classification artefacts including enterprise taxonomies, vocabularies, classification schemes, namespaces and ontologies.	Analytical classification and coding	L3	Contributes to organisational information classification/labelling strategy.
	Can implement categorisation products in systems.	No equivalence
Management/specialist	Can lead information classification initiatives.
Management/specialist	Can provide guidance on the development and maintenance of information classification artefacts.
Executive/lead	Understands and supports information classification initiatives.	Analytical classification and coding	L6	Leads strategic interventions to improve information classification/labelling.
Executive/lead	Can drive a culture that values information and data sharing and advocates good information classification.	Analytical classification and coding	L6

Metadata

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the role and benefits of metadata to ensure information and data are discoverable.	Records management	L2	Identifies and applies appropriate metadata.
	Understands that metadata in business systems, such as audit trails, demonstrates authenticity and integrity.	No equivalence
Practitioner/skilled operational	Understands the fundamental role of metadata in information and data management and what metadata requirements apply to the organisation.	No equivalence
	Can develop metadata schemas based on information management and business requirements.	Information management	L5	Develops organisational taxonomy for information assets. Provides expert advice and guidance to enable the organisation to get maximum value from its information assets.
	Can implement metadata standards based on business requirements and map metadata in systems to standards.	Information management	L5
Management/specialist	Can explain the role of metadata to ensure the integrity and availability of information and data.	No equivalence
	Can manage the appropriate capture of metadata through developing and maintaining policies, procedures, standards and metadata schemas, and advise on metadata standards relevant to the organisation's specific business.			Develops organisational policies, standards and guidelines for information management.
	Understands how metadata enables interoperability.	No equivalence
Executive/lead	Understands the benefits of having adequate metadata.
	Can strategically support a managed metadata environment that enables interoperability.

System implementation and maintenance

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the need for information management functionality in business systems.	No equivalence
Practitioner/skilled operational	Understands the need for information management functionality in business systems.
	Can assess information management functionality in business systems against relevant standards and implement solutions to address identified gaps.
	Can contribute to system management including administering usage and issues.	Application support	L4	Maintains application support processes and checks that all requests for support are dealt with according to agreed procedures.
Management/specialist	Can assess information management functionality in existing business systems against relevant standards and provide advice on solutions and compliance of current systems.	No equivalence
	Can advocate for information management functionality when acquiring new technologies.	No equivalence
	Can support system management including, administering usage and issues, installing and maintaining technology licences.	Application support	L5	Advises on application security, licensing, upgrades, backups and disaster recovery needs. Manages application enhancements to improve business performance.
Executive/lead	Understands the need for information management functionality and supports solutions to address gaps in existing business systems.	No equivalence
Executive/lead	Understands the impacts of new and emerging technologies and ensures information management functionality is considered when acquiring new technologies.	Emerging technology monitoring	L6	Plans and leads the identification and assessment of emerging technologies and the evaluation of potential impacts, threats and opportunities.

Information reuse

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the benefits when information and data can be found, managed, shared and reused easily and efficiently.	No equivalence
Practitioner/skilled operational	Can map metadata and metadata requirements between systems.	Data modelling and design	L4	Plans data modelling and design activities, selecting appropriate techniques and levels of detail to meet objectives. Provides advice and guidance to others using the data structures and associated components.
Practitioner/skilled operational	Is aware of data integration and data exchange methods and protocols, such as APIs.	Data modelling and design	L4
Management/specialist	Can collaborate on interoperability projects including providing metadata requirements and disposal requirements.	No equivalence
Management/specialist	Understands data integration and data exchange methods and protocols, such as APIs.
Executive/lead	Understands the need for interoperability based on evidence of internal/external demands for information and data exchange.
Executive/lead	Can support and resource interoperability projects.

Data governance

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the need for data governance to protect the privacy, accuracy and the ethical use of data, including protecting data against harm, re-identification, inaccuracy and unauthorised access.	No equivalence
Foundation	Is aware of source and reference data.	No equivalence
Practitioner/skilled operational	Can contribute to the development of data governance frameworks.	Data Management	L4	Devises and implements data governance and master data management processes for specific subsets of data.
	Is aware of legislative requirements and trends that impact data governance.	No equivalence
	Understands the privacy and ethical implications of sourcing, managing and controlling data, including protecting data against harm, re-identification, inaccuracy and unauthorised access.
	Can identify reference data and source data (master data) and can engage with relevant stakeholders about its use and management (including disposal).
Management/specialist	Implements and provides advice on the data governance framework.	Data Management	L5	Devises and implements data governance and master data management processes
	Can develop and provide advice on strategies and policies for compliance with information and data legislation.	Data Management	L5	Identifies and addresses issues preventing optimal use of information assets. Provides expert advice to maximise data asset value, ensuring data quality and compliance
	Can advise on legislative requirements and trends that impact data governance.	Data Management	L5
	Can manage data disposal projects and understands the disposal implications for source (master data) and reference data.	Data Management	L5	Devises and implements data governance and master data management processes
Executive/lead	Provides leadership, direction and oversight for data governance activities.	Data Management	L6	Leads the strategic direction for data management and data governance, establishing policies and frameworks that align with business and regulatory requirements
	Leads the implementation and monitoring of the data governance framework to meet legislative requirements.
	Integrates risk management into frameworks, aligning with strategic objectives and risk appetite.
	Understands that data governance is fundamental to broader information governance objectives.	No equivalence
	Understands disposal requirements for information assets including data.	No equivalence

AI governance

IM Capability Framework		SFIA
Level	Specific skill or knowledge	Capability	Level	Specific skill or knowledge
Foundation	Is aware of the requirement to have human oversight and responsibility of any content generated by AI and outputs are managed according to recordkeeping requirements.	No equivalence
Foundation	Is aware that source content needs to be documented and should not include information designated as sensitive or restricted.
Practitioner/skilled operational	Identifies AI generated content and ensures there is human oversight of the content, and it is managed according to recordkeeping requirements
	Ensures that source data is documented and does not include restricted or sensitive information.
	Documents training data, configurations and implementation of AI tools and manages those records according to recordkeeping requirements.
Management/specialist	Ensure staff oversee and take responsibility for AI generated content and manage it according to recordkeeping requirements.
	Can advise on ethical and security requirements for use of source data.
	Ensures that AI tool implementations are adequately documented and managed according to recordkeeping requirements.
Executive/lead	Provides leadership, direction and oversight for AI governance activities.
Executive/lead	Manages risk and benefits of AI implementations.