Resumen

Escalate VF AI Framework into group remediation review

Assign central engineering support and freeze unapproved production AI changes for 14 days.

Reduce Azure OpenAI concentration in high-risk systems

Approve a fallback routing pattern and require review of all customer-facing assistants in the top 10 entities.

Recover stale evidence collectors across the worst repo clusters

Prioritize evidence-collector and repo-scanner remediation in Tier 1 release paths before next steering meeting.

Close overdue temporary waivers on production AI systems

Force renew, close, or replace all overdue exceptions with explicit compensating controls.

Mandate SOC 2 Type II for all Vodafone Egypt subprocessors

Require SOC 2 Type II attestation from every third-party subprocessor handling Vodafone Egypt customer data by end of Q2.

Review Azure OpenAI data residency compliance for EU entities

Audit all Azure OpenAI deployments across EU operating companies to confirm data residency alignment with GDPR and local DPA requirements.

Extend exception waiver for legacy Vodacom billing system

Grant a 90-day extension on the existing production waiver while the billing platform migration completes Phase 2.

Approve updated AI model risk framework for Tier 1 systems

Ratify the revised model risk framework that introduces mandatory red-teaming, bias testing, and drift monitoring for all Tier 1 AI systems.