Digital, Automation, and Information Security
Development of artificial intelligence and digital technologies
Modern energy is characterised by the active implementation of digital solutions, automation, big data processing and artificial intelligence (AI) technologies. For "Samruk-Energy" JSC, the development of AI and digital technologies is a strategic direction that ensures an increase in operational efficiency, reliability of production assets and the quality of management decisions.
On 23 June 2025, the IT and Business Architecture Department was transformed into the AI and Digital Technologies Development Department, which became a centre of competence for digital transformation and the implementation of projects using AI in the group of companies.
In the second half of 2025, a Roadmap for the implementation of projects using artificial intelligence for 2025–2030 was developed and approved. The document is aimed at
- Optimisation of production processes
- Improving equipment reliability
- Reduced production risks
- Improving the level of industrial and information security
- Improving the quality and speed of management decisions
The implementation of the Roadmap provides a systematic approach to digital transformation and forms the basis for the company's sustainable development in the long term.
Implementation of artificial intelligence systems
Intelligent video analytics
Almaty Electric Stations JSC and Ust-Kamenogorsk HPP AES LLP have put into commercial operation an intelligent video analytics system based on artificial intelligence technologies.
The system provides
- Automatic control of compliance with industrial safety requirements
- Recording incidents in a single digital log
- Identification of the lack of personal protective equipment, the presence of personnel in dangerous areas, abandoned objects
- 24/7 monitoring
- Face recognition.
In “AlES” JSC, the number of occupational health and safety incidents decreased by more than 80%, which confirmed the high efficiency of the solution and made it possible to start replicating it in other subsidiaries and affiliates.
Integrated Enterprise Resource Planning (ERP)
In 2025, a large-scale programme for the transition to integrated enterprise management systems (ERP) was launched
- In 2025, ERP systems were implemented at GRES-1, Moinak HPP, and Shardara HPP.
- Implementation activities are ongoing at AlES and AZhK.
On 16 June 2025, the corporate centre made the transition from 1C Consolidation to 1C Holding Management, which made it possible to improve the quality, transparency and efficiency of financial reporting.
The expected effect of the ERP implementation is the formation of a unified digital management environment that covers processes from planning needs to cost analysis and management decision-making.
Robotisation (RPA)
In 2025, robotic software solutions (RPA) were implemented in the corporate centre, Alatau Zharyk Company JSC, Ust-Kamenogorsk HPP AES LLP, First Wind Power Plant LLP and Qazaq Green Power.
RPA is used in the following areas
- Marketing & Purchasing
- Financial and economic processes
- Individual production functions.
The use of robotisation has significantly reduced the volume of manual operations, increased data accuracy and accelerated the execution of routine processes.
Strategic Session on AI Development (Plans)
In 20 December 25, the strategic session "AI Leaders" was held, dedicated to the implementation of artificial intelligence in the Group's subsidiaries and affiliates.
Main objectives of the session
- Formation of a single vector for the development of AI projects
- Identification of priority areas of digitalisation
- Agreeing on practical steps to scale digital solutions.
The results of the session formed the basis for further plans for the development of AI and digital technologies in the group of "Samruk-Energy" JSC.
Information Security
GRI 3-3, GRI 418-1
In accordance with the Information Security Policy of "Samruk-Energy" JSC, the company aims to build an information security system that meets the requirements of the international standard ST RK ISO 27001.
As part of the implementation of this goal, internal regulatory documents have been developed and approved, and the following key activities are being implemented
- Development and updating of the information security management system (ISMS)
- Identification of information security risks and owners of information assets
- Risk assessment and treatment
- Сoordination and implementation of control measures
- Risk monitoring and reporting
- Continuous improvement of the ISMS.
Responsibility for ensuring information security is assigned to the "Security" Department, which is an independent structural unit and is directly subordinate to the Chairman of the Management Board of "Samruk-Energy" JSC.
During the reporting period, the company did not record any justified complaints related to the violation of confidentiality, loss, leakage or theft of customer data.
Information Security Management
Information security activities take into account three key areas Information Security Management
- Technical support of information security
- Monitoring and responding to incidents
- Information Security Management.
The company has the following main documents
- Information Security Policy of "Samruk-Energy" JSC
- Rules for ensuring information security of information systems
- Instruction on ensuring the safety of confidential information in "Samruk-Energy" JSC.
Information Security Technical Support
Technical support is provided by the Company's Security Department together with specialists from Energy Solutions Center LLP and includes
- Anti-virus protection of the corporate network
- Organisation of a demilitarised zone (DMZ) based on firewall solutions
- Monitor and filter emails to prevent the spread of malicious code and data breaches.
Incident control and response
The control and response function is implemented jointly with the Operational Center for Information Security (OSIB) using specialised software and hardware solutions and includes
- Corporate network security
- Real-time incident detection
- Prioritisation and control of response times (SLAs)
- Preparation of analytical and regulatory reports.
"Samruk-Energy" JSC is connected to the SDIB of "QazCloud" LLP, which provides 24/7 information security monitoring, protection against DDoS attacks, web protection, audit (penetration test), expert support and regular reporting. Throughout the year, work is underway to raise awareness of the Information Security Management System (ISMS). A work plan is approved annually, within the framework of which training materials, such as memos, screenservers and videos, are developed for all employees of the Company. Newsletters are also sent about innovations, requirements and preventive measures for information security.
Every year, all employees of the Company undergo online testing for knowledge of information security standards, which confirms their competence in this area.
When hiring, an "Onboarding Course" is held for all new employees, which includes information security training.
