SAMA TECHLY / KNOWLEDGE

What matters

01

Data

Classify information and limit transfers. Review selected providers’ terms and retention periods.

02

Actions

Apply least privilege and approval for sensitive operations. An instruction does not replace technical authorisation.

03

Accountability

Define authorised owners, necessary logs and the incident procedure.

Check in your context

Prepare the next step

  • A real task example and its exceptions
  • Current tools and available access
  • Permitted data and the role of human review
  • A baseline metric to assess outcomes

An explicit scope, documented rules and a validation protocol. Access and responsibilities are defined before launch.

Useful references

NIST — AI Risk Management Framework ↗