--- title: Do we really have “best” practices yet? description: Exploring the concept of best practice in AI governance, questioning its validity, advocating for alternates in the banking and insurance sectors. image: https://riskinsights.com.au/hubfs/Do%20we%20really%20have%20%E2%80%9Cbest%E2%80%9D%20practices%20yet.png --- [Skip to content](https://riskinsights.com.au/blog/do-we-really-have-best-practices-yet#main-content) [![Risk Insights - Logo - (RGB, Horizontal, Small)](https://riskinsights.com.au/hs-fs/hubfs/Risk%20Insights%20-%20Logo%20-%20(RGB%2c%20Horizontal%2c%20Small).png?width=200&height=40&name=Risk%20Insights%20-%20Logo%20-%20(RGB%2c%20Horizontal%2c%20Small).png)](https://riskinsights.com.au) - [Articles](https://riskinsights.com.au/blog) - [Approach](https://riskinsights.com.au/approach) Show submenu for Approach - [Commissions (Accuracy)](https://riskinsights.com.au/broker-partner-commission-accuracy-reviews) - [Claims Fraud (Fairness)](https://riskinsights.com.au/claims-fraud-fairness-reviews) - [Fees and Charges (Accuracy)](https://riskinsights.com.au/fee-and-charge-accuracy-reviews-risk-insights) - [About](https://riskinsights.com.au/about) - [Contact](https://riskinsights.com.au/contact) Open main navigation Close main navigation - [Articles](https://riskinsights.com.au/blog) - [Approach](https://riskinsights.com.au/approach) Show submenu for Approach - [Commissions (Accuracy)](https://riskinsights.com.au/broker-partner-commission-accuracy-reviews) - [Claims Fraud (Fairness)](https://riskinsights.com.au/claims-fraud-fairness-reviews) - [Fees and Charges (Accuracy)](https://riskinsights.com.au/fee-and-charge-accuracy-reviews-risk-insights) - [About](https://riskinsights.com.au/about) - [Contact](https://riskinsights.com.au/contact) --- 12 Mar 2026 # Do we really have “best” practices yet? ![Picture of Yusuf Moolla](https://riskinsights.com.au/hs-fs/hubfs/Yusuf_Moolla_Headshot-transformed.png?width=50&name=Yusuf_Moolla_Headshot-transformed.png) [Yusuf Moolla](https://riskinsights.com.au/blog/author/yusuf) Share: [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://riskinsights.com.au/blog/do-we-really-have-best-practices-yet) [envelope icon](mailto:?body=https://riskinsights.com.au/blog/do-we-really-have-best-practices-yet) “Best practice” gets thrown around a lot in AI and algorithm governance discussions. I hear it often and imagine you’ve come across it too. But with emerging AI and algorithms, we don’t really know what “best” looks like yet. To call something best practice, we’d need at least a few things: - clear evidence that it works better than other options - results that hold up over time - proof it works for different groups of stakeholders - for guidelines or frameworks that are meant to be industry agnostic, evidence they work beyond one sector - in banking and insurance, alignment with regulatory expectations.   For most algorithmic systems in banking and insurance, we don't have all of those yet. We may have “what others are doing”, “what a vendor recommends”, or “what the (thousand-page) framework says”. That’s not quite “best”. So when we hear “This is best practice”, perhaps we should ask for evidence that it is.   Best practice is comforting. It’s good marketing speak, and sounds like a solid defence.   Something along the lines of “Current good practice, under review” is less authoritative. But it is perhaps more honest, giving us room to adjust as we learn in practice.     --- Disclaimer: The info in this article is not legal advice. It may not be relevant to your circumstances. It was written for specific contexts within banks and insurers, may not apply to other contexts, and may not be relevant to other types of organisations. ---     ## Related posts [![Do we trust systems that advise more than those that act?](https://riskinsights.com.au/hs-fs/hubfs/Do%20we%20trust%20systems%20that%20advise%20more%20than%20those%20that%20act.png?height=200&name=Do%20we%20trust%20systems%20that%20advise%20more%20than%20those%20that%20act.png)](https://riskinsights.com.au/blog/do-we-trust-systems-that-advise-more-than-those-that-act) ## [Do we trust systems that advise more than those that act?](https://riskinsights.com.au/blog/do-we-trust-systems-that-advise-more-than-those-that-act) 03 Sep 2026 Lately we’ve become accustomed to thinking "LLM" when we hear “AI”. And who can blame us when... [Read more](https://riskinsights.com.au/blog/do-we-trust-systems-that-advise-more-than-those-that-act) [![Algorithm integrity and the trust we hold](https://riskinsights.com.au/hs-fs/hubfs/Algorithm%20integrity%20and%20the%20trust%20we%20hold.png?height=200&name=Algorithm%20integrity%20and%20the%20trust%20we%20hold.png)](https://riskinsights.com.au/blog/algorithm-integrity-and-the-trust-we-hold) ## [Algorithm Integrity and the Trust we hold](https://riskinsights.com.au/blog/algorithm-integrity-and-the-trust-we-hold) 19 Mar 2026 We already know that ineffective algorithms have a direct monetary impact. But the deeper,... [Read more](https://riskinsights.com.au/blog/algorithm-integrity-and-the-trust-we-hold) [![Article title with Risk Insights logo](https://riskinsights.com.au/hs-fs/hubfs/60.png?height=200&name=60.png)](https://riskinsights.com.au/blog/a-simple-analogy-to-explain-the-difference-between-controls-and-substantive-testing) ## [A simple analogy to explain the difference between controls and substantive testing](https://riskinsights.com.au/blog/a-simple-analogy-to-explain-the-difference-between-controls-and-substantive-testing) 30 Oct 2025 TL;DR • In this analogy, controls testing = building insurance, substantive testing = contents... [Read more](https://riskinsights.com.au/blog/a-simple-analogy-to-explain-the-difference-between-controls-and-substantive-testing) We acknowledge Aboriginal and Torres Strait Islander peoples as the Traditional Custodians of the lands on which we live and work. We pay our respects to Elders past and present, and honour the rich diversity of the world's oldest living cultures. [View our LinkedIn page](https://www.linkedin.com/company/riskinsightsap) [email us](mailto:info@riskinsights.com.au) [Call us](tel:+61408946143) 2026 Risk Insights Pty. Ltd. | [Privacy](https://riskinsights.com.au/privacy-policy) | [Disclaimer](https://riskinsights.com.au/disclaimer) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Yusuf Moolla", "url" : "https://riskinsights.com.au/blog/author/yusuf" }, "dateModified" : "2026-03-11T20:30:00.892Z", "datePublished" : "2026-03-11T20:30:00.000Z", "headline" : "Do we really have “best” practices yet?", "image" : [ "https://riskinsights.com.au/hubfs/Do%20we%20really%20have%20%E2%80%9Cbest%E2%80%9D%20practices%20yet.png" ], "mainEntityOfPage" : { "@id" : "https://riskinsights.com.au/blog/do-we-really-have-best-practices-yet", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://riskinsights.com.au/hubfs/Risk%20Insights%20-%20Logo%20-%20(RGB%2c%20Horizontal%2c%20Small).png" }, "name" : "Risk Insights Pty. Ltd." } } ```