IT & Security · Digital Employee #90
AI Phishing Report Analyst
Analyse reported emails
Analyse reported emails. AI Phishing Report Analyst works for your IT and security team under a named human owner, with its cost and results shown in the Investment & ROI Ledger.
What it does
Mission: Analyse reported emails.
AI Phishing Report Analyst works for your IT and security team. Typical work: header/link analysis, verdicts, bulk removal proposals. It works inside IT & Security — Security Center, Office — Mail.
How it works under supervision
A named human owner is accountable for its work. Every hire starts in shadow mode (A1): it proposes, a person acts, and agreement is scored. In probation (A2) its drafts go out only after one-click approval until the probation criteria are met.
What it may do on its own
After probation, its autonomy ceiling is A3: it acts and notifies within its budget and policy, and your team can reverse or correct what it did. Autonomy is earned per skill and drops after an incident.
What needs approval
Its risk ceiling is R3. Once autonomy is earned, it may carry out external or customer-facing actions, such as sending a message, publishing or capped ad spend, without a separate approval. R4 Actions (payments, deletion, signing, payroll) always need a person.
Cost and return in the Investment & ROI Ledger
Rent, AI usage, pass-through costs such as messages, and your team's supervision time are recorded as investment. Results are tracked against its KPIs (verdict accuracy, time to verdict) and your previous process, shown as observed or assisted unless a reviewed experiment shows incremental return. Nothing is guaranteed.
Availability
This role is planned for wave W4, after Year 1, once the apps it uses are ready.
Skills & Actions
What it does
- Header/link analysis
- Verdicts
- Bulk removal proposals
Tools
Apps it works in
- IT & Security — Security Center
- Office — Mail
It uses only the apps and modules your workspace subscribes to, with the permissions you grant.
Frequently asked questions
Does AI Phishing Report Analyst work without human oversight?
No. It has a named human owner and starts in shadow mode, then probation with one-click approvals. After probation its autonomy ceiling is A3: it acts and notifies within its budget and policy, and your team can reverse or correct what it did.
What does AI Phishing Report Analyst need approval for?
Its risk ceiling is R3. Anything irreversible goes to a person. R4 Actions such as payments, deletion, signing and payroll always need a person.
How do I see what AI Phishing Report Analyst costs and returns?
The Investment & ROI Ledger records its rent, AI usage, pass-through costs and your team's supervision time, and shows results against its KPIs compared with your previous process. Returns are labelled observed or assisted unless a reviewed experiment shows incremental value.
When will AI Phishing Report Analyst be available?
It is planned for wave W4, after Year 1. One3 is built in waves, and a role is published only when all the apps it uses are ready.
Put the AI Phishing Report Analyst on probation
Agree the goal, the budget and the approval rules. The Investment & ROI Ledger shows what it cost and what it returned.