Saudi government entities need internal auditors trained to audit AI agents that check procurement contracts, process service requests and draft Arabic replies to beneficiaries. That means testing verdicts, approvals, certificates and provenance from the record. Conclusions and reporting stay with the auditors. The Personal Data Protection Law, SDAIA's AI ethics principles and national cybersecurity controls shape oversight.
What do internal auditors in Saudi government entities work on?
Internal audit units in ministries, authorities and public corporations report to the head of the entity and, increasingly, to an audit committee. Their plans cover procurement and contract execution, payroll and allowances, revenue collection, asset management and the performance of digital services. The national audit institution examines entities from outside, and internal audit prepares for and follows up its observations.
Digital services have grown quickly, with many requests from citizens, residents and businesses now handled online end to end. That shifts audit attention from paper files to platform data: whether requests were handled within service standards, whether decisions were consistent, and whether access to personal data was appropriate.
What changes when agents arrive?
Entities are introducing agents in digital services and back-office checks. Each capability holds its own depth.
| Use | Depth | What audit tests |
|---|---|---|
| Service request pre-checks against published requirements | 1 | That decisions were made by officers |
| Arabic replies to beneficiaries on request status | 2 | That replies were reviewed and accurate |
| Contract milestone and penalty calculations | 1 | That penalties applied match the contract |
| Routine document requests to applicants | 3 within limits | That the agent stayed inside the entity's limits |
Audit can use agents on its own testing, at depth 1, to run full-population tests from the append-only record, and at depth 2 to draft workpapers.
What must auditors learn, and what stays with them?
Auditors should first learn the control model: depth earned on the entity's own cases, five bounds checked on every action with the lowest winning, four verdicts, and the record. With that, they can design tests that go beyond whether the configuration "looks right".
Next comes setting red lines. An agent should not approve or reject a service request that confers a right, impose a contractual penalty, or change a beneficiary's record. Our list of what internal auditors should never let an AI agent do gives a base to adapt. Auditors should test that each of these is refused or held, and that held items went to officers with delegated authority.
Provenance is specific here because much of the data comes from other government systems. A fact retrieved from the entity's own register or another authority's system of record is sealed; one typed into a request form is declared. Auditors should test that decisions did not rest on declared facts alone.
Language matters too. Beneficiary replies are in Arabic, so auditors who review samples need to read them in Arabic and check them against the source.
What stays with the auditor: plan, findings, conclusions and reporting. Our piece on whether AI agents will replace internal auditors explains why audit judgement and independence remain with people.
Which Saudi rules shape oversight and literacy?
The Personal Data Protection Law applies to government entities, with SDAIA as the competent authority. It sets principles on purpose limitation and minimisation, gives individuals rights over their data, and restricts transfers outside the Kingdom. Audit should test what personal data each agent can read, why, and where it is processed.
SDAIA has also published national AI ethics principles, including accountability, transparency, fairness and human oversight. For an internal auditor, these become testable questions: who owns each agent, how decisions are explained to beneficiaries, and how a person can intervene. Government entities also apply national cybersecurity controls, which reach the systems and connections agents use.
SAMA supervises financial institutions and does not govern a ministry's internal audit. ISO/IEC 42001 and the NIST AI Risk Management Framework give useful structure for an AI audit programme, and ISO/IEC 27001 covers information security.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
How should the audit unit train over 90 days?
Days 1 to 30. All auditors learn the basics. The head of audit adds each agent to the audit universe with its capabilities, depth, certificate expiry and data access.
Days 31 to 60. Pilot an audit of service request pre-checks. Test that officers decided every request, that the agent remained at depth 1, that certificates were current on each date, and that Arabic replies matched the source.
Days 61 to 90. Write the standing audit programme, map it to SDAIA's principles and the PDPL, and record training in the training plan template for internal auditors. Set up banking corrections for audit's agent.
Where the Academy fits
Pryme Intelligence Academy's lessons can be read or listened to, and its module tests are set in the learner's own industry and role, so auditors in government see government cases. The Foundations badge is free and does not expire. Auditors leading agent audits can take the Operator track, which ends in a written exam and a practicum signed off by an assessor.
Questions people ask
Do SDAIA's ethics principles bind government entities?
They state national expectations for AI use and are widely referenced. Treat them as the standard you will be asked about and confirm their status for your entity with counsel.
Can an agent impose a contract penalty on a supplier?
It can calculate the penalty at depth 1. Imposing it is a decision with legal effect and stays with an authorised official.
How should agent findings reach the national audit institution?
Through the entity's normal reporting channels, with evidence drawn from the record rather than screenshots. Clear, sourced findings make external review quicker. Our piece on why internal auditors are the real control and the guide to AI agent skills by role cover audit's place.