Digital Employees · Department
IT & Security Digital Employees
Eight planned Digital Employees for the IT helpdesk, access reviews, alert triage, phishing analysis, vulnerabilities, change risk, assets and auditing other agents. Containment needs approval.
IT & Security Digital Employees are designed to reduce routine load on IT and security teams. They resolve common IT requests, run access review campaigns, triage and deduplicate security alerts, analyse reported phishing emails, prioritise vulnerabilities, score change risk, reconcile devices and licences, and audit other Digital Employees.
The AI Agent Governance Auditor is a meta-role: it samples the work of other agents, scans for policy compliance and reports drift, so problems are found before they become incidents. It is planned for W2.
How they work
- They operate ITSM, Identity & Access, Security Center, DevHub, Issues & Sprints, Assets & Maintenance, AI Governance and AI Observability.
- Revoking access, removing emails in bulk and containment steps are proposals or approval-gated Actions. Containment is R3 and needs approval until autonomy is earned.
- Each agent has its own non-human identity with scoped, short-lived credentials and can be stopped with a kill switch.
Cost and return
The Investment & ROI Ledger records rent, AI usage and the time your team spends reviewing. Results are tracked as KPIs such as mean time to triage, excess access removed and critical vulnerability age, against your previous process.
Planned waves: Agent Governance Auditor in W2, Access Reviewer in W3, the rest in W4.
8 IT & Security roles
| Role | Mission | Autonomy | Max risk | Wave |
|---|---|---|---|---|
| AI IT Helpdesk Agent | Resolve routine IT requests | A3 | R2 | W4 |
| AI Access Reviewer | Keep permissions least-privilege | A2 | R2 | W3 |
| AI Security Alert Triage Analyst | Triage alerts, reduce noise | A3 | R2 | W4 |
| AI Phishing Report Analyst | Analyse reported emails | A3 | R3 | W4 |
| AI Vulnerability Manager | Prioritise and track fixes | A3 | R1 | W4 |
| AI Change Risk Assessor | Score IT changes before approval | A2 | R1 | W4 |
| AI IT Asset Manager | Know every device and licence | A3 | R2 | W4 |
| AI Agent Governance Auditor (meta-role) | Audit other agents | A4 | R1 | W2 |
Autonomy A0 (suggest only) to A4 (act within policy). Risk tiers R0–R4; anything above a role's ceiling waits for a person. See the glossary →
See how One3 would run your business
Tell us about your team and the outcomes you want. We will walk you through the apps, the Digital Employees and the plan for your industry.