Capstone: a one-page AIS Program outline for a Pakistani insurer

Three ways to see it

1. 1

   The one-page AIS Program outline has nine items, each one or two lines. Policy statement: principles and signatories. Inventory: scope and update cadence. Governance: bodies, members, frequency. Risk management: how risks are identified, measured, mitigated. Testing and validation: when, by whom, against what. Third-party management: vendor due diligence, contract requirements. Consumer disclosure: when and how customers are told AI was used. Incident response: definition, escalation, reporting. Training: who needs what training how often.

2. 2

   Way one to fill the outline: start with what you already have. Most insurers in Pakistan already have a Risk Management Framework, an IT Security Policy, a Compliance Manual, and a Consumer Complaints Process. Map each AIS Program item to the existing document. Where the existing document covers it, write 'extend' and a short note. Where nothing covers it, write 'create' and a 60-day deadline. The outline becomes a project plan.

3. 3

   Way two: assign owners. Each of the nine items needs a single named owner. The Chief Actuary likely owns risk and validation. The Chief Compliance Officer likely owns disclosure and incident reporting. The Chief Technology Officer likely owns inventory and third-party. The Head of HR likely owns training. The CEO chairs the AI Committee. Without named owners on the outline page, the program belongs to no one.

The why-tree

Try this with Claude

AI-edge prompt to try: 'Acting as a NAIC examiner advising a Pakistani life insurer, draft a one-page AIS Program outline. List nine sections with one-line descriptions, suggested owners by title, and a 60-day milestone for each. Add a board review date six months from today.' Edit before sending.