This policy governs the competence and integrity of every person who works at the KOM Oman AI Factory. It covers the 104 FTE core organization set out in PRM-ORG-2026-001, and it applies in the same terms to contractors and managed-service personnel who hold an entitlement at the site.

Two principles run through it. First, a credential is not a competence — a certificate proves examined knowledge, an authorisation to work proves demonstrated capability on this plant, and the second is what governs who may touch the critical path. Second, screening precedes credentialing — no access entitlement is provisioned until the screening level for the role has been completed and recorded.

A role is designated critical if it meets any one of the following. The designation drives both the certification requirement and the screening level.

1. Can interrupt service by a single action. Switching on the electrical chain, isolating a cooling loop, changing fabric configuration, or administering the scheduling platform.
2. Holds unescorted access to a data hall or rack. Layer 4 or Layer 5 in the layered model of PRM-SEC-2026-001, whether or not the person's normal duties require it.
3. Administers a control system. Access control, video surveillance, BMS, EPMS, identity, or the export-control screening tooling — the systems that evidence everything else.

Every role in the core organization, its headcount at full build-out, whether it is designated critical under section 1.1, and the screening level that follows. Phase 1 staffs 88 of these; Phase 2 adds the remaining 16.

Mandatory means the role may not be filled, or an incumbent may not work unsupervised, without it. Target means it is required within the stated period from appointment and funded by Prima. Renewal follows the awarding body's cycle unless a shorter one is stated.

Required of every employee and of every contractor holding an entitlement, regardless of role or division. Completion is a precondition of first entry, not a task to be caught up.

A certificate proves examined knowledge. Authorisation to work proves demonstrated capability on this plant, on these procedures, witnessed by someone already authorised. The two are separate and the second is what governs the critical path.

A single register records, for each named person, the exact scope they may perform unsupervised — which switching operations, which isolations, which platform changes. It is the document a shift lead consults before assigning work, and it is the document an auditor samples.

• Scope is enumerated, not implied. "Electrical Engineer" is a role; "LV switching at distribution boards DB-1 to DB-8" is a scope. Only the second appears on the register.
• Withdrawal is immediate and unilateral. The discipline manager or the COO may withdraw an authorisation on the spot following an error, a lapsed certification, or a failed reassessment. Reinstatement requires reassessment.
• Reassessment on a cycle. Every authorisation is reassessed at least every two years, and after any absence from the discipline exceeding three months.
• No self-authorisation. No person may sign off their own scope, and no person may witness a procedure for which they are not themselves authorised.

Screening is completed and recorded before an access entitlement is provisioned. There is no provisional or conditional credential. The level is set by the role, per the register in section 02, and the vetting decision rests with the CISO — not with the hiring manager, whose interest is in filling the post.

• Sanctions monitoring is continuous, not periodic. All personnel are screened against sanctions and denied-party lists on a rolling basis under PC-ECP-001, with a match escalated to the CISO the same working day.
• Self-reporting duty. Every person holding a Level 2 or Level 3 entitlement must report, within five working days: any arrest or charge, any material change in financial circumstances, any approach seeking access or information, and any new side employment.
• Failure to report is itself a ground for withdrawal. The obligation is stated in the employment contract and re-affirmed at each annual declaration.
• Adverse finding does not automatically disqualify. The CISO assesses relevance, recency and candour. A disclosed matter is treated differently from a concealed one — concealment is the disqualifying act.

The outsourced services listed in PRM-ORG-2026-001 — physical security officers, cleaning, HVAC and generator OEM maintenance, fire protection — are not in the 104 FTE, but their personnel stand inside the same perimeter. They are screened and trained to the level of the access they hold, not the level of their employer's own policy.