Accelerated Innovation

Ensure You Have the Capabilities to Win with GenAI

GenAI Ops I&AM and Change Management Best Practices

Workshop
Control who can do what in GenAI—and keep change from becoming risk

As GenAI embeds into workflows, access and change controls become make-or-break. This workshop maps identity, permissions, audit evidence, and change approvals across system layers so scale doesn’t turn into unmanaged risk. 

Leave with a practical operating approach that reduces access risk, improves auditability, and makes GenAI change safer to scale. 

The Challenge

Many organizations apply traditional I&AM and change controls to GenAI—then discover new gaps created by dynamic data access, evolving models, and tool-driven actions. 

  • Roles and controls don’t map cleanly to GenAI workflows: Access boundaries across data, models, prompts, and tool actions are unclear, leading to over-permissioning or blocked productivity. 
  • Changes create downstream impact that’s hard to predict: Model updates, routing changes, and policy adjustments can shift behavior quickly, without consistent scenario planning and approvals. 
  • Audit evidence is incomplete or hard to use: Access and change logs exist, but aren’t structured to support compliance, investigations, and accountability at scale. 

If I&AM and change management aren’t designed for GenAI, scale increases exposure—and slows adoption when scrutiny rises. 

Our Solution

We help teams operationalize GenAI I&AM and change management as a layered control system—policy-based, auditable, and adaptable as use cases expand. 

  • Map identity and access management to GenAI use cases: Define what must be controlled in each use case—data access, model access, tool actions, and administrative operations. 
  • Implement policy-based controls and roles across AI layers: Establish roles, permissions, and policies that align to responsibilities across data, model, and orchestration layers. 
  • Manage change impacts through scenario planning: Define how changes are assessed and approved so downstream behavior shifts are anticipated and controlled. 
  • Audit access and change logs for compliance: Clarify what must be logged, how it’s reviewed, and how evidence is used to support compliance and investigations. 
  • Evolve I&AM using operational and business feedback: Build feedback loops that refine roles, policies, and processes based on real usage and incident learnings. 
Area of Focus
  • Mapping I&AM requirements to GenAI use cases 
  • Policy-based controls and role definitions across AI layers 
  • Managing change impacts through scenario planning 
  • Auditing access logs for compliance 
  • Auditing change logs for compliance 
  • Evolving I&AM with operational and business feedback 
Participants Will
  • Identify the key identity and access control needs across priority GenAI use cases and system layers 
  • Define role- and policy-based controls that balance productivity with enterprise risk management 
  • Establish a change management approach that anticipates downstream impacts and reduces rollout risk 
  • Define audit expectations for access and change logs to support compliance and accountability 
  • Leave with an improvement plan to evolve I&AM and change controls using operational feedback 

Who Should Attend:

Enterprise ArchitectsRisk and Compliance LeadersGenAI Program LeadersGenAI Platform LeadersSecurity and Identity Access LeadersOps, SRE, and Reliability Leaders

Solution Essentials

Format

Facilitated workshop (interactive discussion + working session) 

Duration

8 hours 

Skill Level

Advanced

Tools

Virtual whiteboard and shared document workspace 

Operate. Monitor. Control.