FT-01 · Cyber Governance, Risk & Compliance (GRC)

Regulatory calendar, board reporting and financial-sector cyber risk indicators.

Builds on: GR-01, GR-04

FT-02 · SAMA & NCA Compliance: Assessment & Implementation

Independent assessment against SAMA CSF, BCM and Counter-Fraud frameworks and NCA ECC/CCC; a remediation plan, implementation follow-up and regulatory evidence.

FT-03 · Penetration Testing & Vulnerability Assessment

Mobile banking, payment gateways and open APIs, within agreed assessment scopes.

Builds on: CY-02, CY-03

FT-04 · Threat Intelligence

Analysis of fraud, phishing and card-data leakage threats, and brand impersonation during the engagement.

Builds on: CY-06

FT-05 · Incident Response Capability (CSIRT)

SAMA reporting procedures and simulations involving customer funds and data.

Builds on: CY-07

FT-06 · PDPL Gap Assessment

Assessment of financial customer data and third-party sharing.

Builds on: DP-01

FT-07 · PDPL Implementation

Processing records, impact assessments for finance and payment products, and data-rights request procedures.

Builds on: DP-02

FT-08 · AI Adoption Advisory

Use cases in customer service, credit and operations.

Builds on: AI-01

FT-09 · Custom AI Model Development

Credit scoring, customer churn prediction and model explainability documentation.

Builds on: AI-02

FT-10 · Financial Fraud Detection Models

Models trained on transaction data to detect suspicious patterns and raise alerts, integrated with existing systems.

FT-11 · NLP & Arabic Assistants

Customer-service assistants and extraction from KYC documents, contracts and financing applications.

Builds on: AI-03

FT-12 · Predictive Analytics

Liquidity, defaults and financial product demand forecasts; leadership dashboards via FT-23.

Builds on: DA-02

FT-13 · Computer Vision

Identity verification, cheque and document reading, and document-tampering detection.

Builds on: AI-04

FT-14 · AI Integration with Banking & Enterprise Systems

Core banking, CRM and workflows.

Builds on: AI-05

FT-15 · Robotic Process Automation

Reconciliations, application entry and regulatory report preparation.

Builds on: AI-06

FT-16 · AI Governance & Assurance

Bias testing of credit and fraud models and explainability documentation.

Builds on: AI-07

FT-17 · Digital Maturity Assessment

Benchmarking against financial-sector peers.

Builds on: DT-01

FT-18 · Gap Analysis & Opportunity Mapping

Opportunities for digital banking channels and services.

Builds on: DT-02

FT-19 · Transformation Roadmap & Masterplan

A digital operating model for the financial institution.

Builds on: DT-03

FT-20 · Business Process Reengineering

Account opening, financing and claims processes.

Builds on: DT-04

FT-21 · Change Management & Adoption

Staff and customer adoption of new channels and systems.

Builds on: DT-05

FT-22 · Cloud Strategy & KPI Governance

SAMA outsourcing rules and relevant financial-sector cloud requirements.

Builds on: DT-06

FT-23 · Dashboards, Business Intelligence & Business Analysis

Risk, compliance and regulatory indicators.

Builds on: DA-01

Suggested path

FT-02 → FT-03 → FT-05 → FT-10

Start with compliance assessment, test applications and payment channels, enable the response and reporting team, then develop fraud-detection models according to the institution’s priorities.

FT-10 · Delivery and requirements

Prepare transaction data and features, train and evaluate models, deploy through MLOps, and monitor and retrain. Deliver a documented model, performance report, integration interface and knowledge transfer. Sufficient historical transaction data and access rights are required. Agree detection recall against current rules, false-alarm rate and avoided losses as success indicators.

FT-02 · Success indicators

Agree maturity per domain before and after implementation, gaps closed and the next regulatory assessment result. Regulatory requirements and the applicable framework version are confirmed for the engagement.