Close account-access gaps when staff or contractors leave. Review sessions, files, recovery routes, tokens and work handovers with a practical checklist.
Review shared-folder access through people, groups, links and inherited permissions. Use a checklist, test method and practical supplier example.
Record an AI connection’s data scope, allowed actions, owner, approval controls and revocation method with a worked permission-register example.
Review the data, permissions, approval steps and revocation controls an AI assistant needs before connecting it to business systems.
Reward hacking can make an AI system optimise a score while missing the task. Use outcome checks, limited permissions and approvals for business AI agents.