{"id":927,"date":"2026-11-01T17:52:56","date_gmt":"2026-11-01T16:52:56","guid":{"rendered":"https:\/\/aiolia.eu\/?page_id=927"},"modified":"2026-11-01T18:14:02","modified_gmt":"2026-11-01T17:14:02","slug":"mock-review-exercise-ai-for-organisational-email-security","status":"publish","type":"page","link":"https:\/\/aiolia.eu\/index.php\/mock-review-exercise-ai-for-organisational-email-security\/","title":{"rendered":"Mock review exercise: AI for Organisational Email Security"},"content":{"rendered":"\n<!--\nWORDPRESS PAGE TITLE: AI for Organisational Email Security\nPaste this entire fragment into one Custom HTML block.\nThe theme supplies the page title, logo, navigation, footer and fonts.\nIf WordPress removes the style element, put its contents in Additional CSS.\nSource: Mock review exercise UC3 v2.pdf. Scenario and tasks retained.\nThe source dashboard is recreated as responsive HTML.\n-->\n<style>\n#aiolia-exercise-03 {\n  --ae-red: var(--nv-primary-accent, #ff001e);\n  --ae-ink: var(--nv-text-color, #393939);\n  --ae-soft: var(--nv-light-bg, #f4f4f4);\n  color: var(--ae-ink);\n  font: inherit;\n  line-height: 1.75;\n  margin: 0 0 3rem;\n}\n#aiolia-exercise-03, #aiolia-exercise-03 * { box-sizing: border-box; }\n#aiolia-exercise-03 p { margin: 0 0 1rem; }\n#aiolia-exercise-03 a { color: var(--ae-ink); text-underline-offset: .2em; }\n#aiolia-exercise-03 a:hover { color: #a50015; }\n#aiolia-exercise-03 a:focus-visible { outline: 2px solid #a50015; outline-offset: 5px; }\n#aiolia-exercise-03 .ae-label {\n  display: inline-block;\n  margin: 0 0 1.5rem;\n  padding: .35rem .8rem;\n  border-left: 3px solid var(--ae-red);\n  background: var(--ae-soft);\n  font-size: .85em;\n  font-weight: 600;\n}\n#aiolia-exercise-03 .ae-index {\n  display: flex;\n  flex-wrap: wrap;\n  gap: .5rem 1.5rem;\n  align-items: baseline;\n  margin: 0 0 2.4rem;\n  padding: 1rem 0;\n  border-top: 1px solid #dedede;\n  border-bottom: 1px solid #dedede;\n  font-size: .85em;\n}\n#aiolia-exercise-03 .ae-index a { padding: .25rem 0; }\n#aiolia-exercise-03 section { margin-bottom: 2.5rem; scroll-margin-top: 2rem; }\n#aiolia-exercise-03 h2 {\n  font-family: var(--headingsfontfamily, \"Montserrat\"), Arial, Helvetica, sans-serif;\n  color: var(--ae-ink);\n  font-size: clamp(1.3rem, 2vw, 1.7rem);\n  font-weight: 600;\n  line-height: 1.4;\n  letter-spacing: 0;\n  text-transform: none;\n  margin: 0 0 1rem;\n}\n#aiolia-exercise-03 .ae-prose { max-width: 92ch; }\n#aiolia-exercise-03 .ae-task {\n  padding: 1.6rem 1.75rem;\n  border-left: 4px solid var(--ae-red);\n  background: var(--ae-soft);\n}\n#aiolia-exercise-03 .ae-task ol { margin: 0; padding: 0 0 0 1.5rem; }\n#aiolia-exercise-03 .ae-task li { margin: 0 0 .85rem; padding-left: .35rem; }\n#aiolia-exercise-03 .ae-task li:last-child { margin-bottom: 0; }\n#aiolia-exercise-03 .ae-task li::marker { font-weight: 600; }\n#aiolia-exercise-03 .ae-footer { font-size: .85em; padding-top: 1rem; border-top: 1px solid #dedede; }\n@media (max-width: 600px) {\n  #aiolia-exercise-03 .ae-index { display: grid; grid-template-columns: 1fr 1fr; gap: .45rem 1rem; }\n  #aiolia-exercise-03 .ae-design li { grid-template-columns: 2rem minmax(0, 1fr); gap: .75rem; }\n  #aiolia-exercise-03 .ae-design li::before { min-height: 2rem; font-size: 1rem; }\n  #aiolia-exercise-03 .ae-task { padding: 1.25rem 1rem; }\n}\n@media print {\n  #aiolia-exercise-03 { font-size: 11pt; color: #000; margin: 0; }\n  #aiolia-exercise-03 .ae-index, #aiolia-exercise-03 .ae-footer { display: none; }\n  #aiolia-exercise-03 h2 { font-size: 15pt; break-after: avoid; }\n  #aiolia-exercise-03 .ae-design li, #aiolia-exercise-03 .ae-task li { break-inside: avoid; }\n  #aiolia-exercise-03 .ae-task { background: none; border-left-color: #555; }\n}\n\n#aiolia-exercise-03 .ae-facts { display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:0; margin:0 0 2.5rem; border-top:1px solid #dedede; }\n#aiolia-exercise-03 .ae-facts > div { padding:1rem 1.25rem 1rem 0; border-bottom:1px solid #dedede; }\n#aiolia-exercise-03 .ae-facts dt { font-size:.8em; font-weight:700; margin:0 0 .3rem; }\n#aiolia-exercise-03 .ae-facts dd { margin:0; font-size:.9em; line-height:1.6; }\n#aiolia-exercise-03 blockquote { margin:1.25rem 0 0; padding:1.25rem 1.5rem; background:var(--ae-soft); border:0; border-left:3px solid #bdbdbd; font:inherit; color:inherit; }\n#aiolia-exercise-03 blockquote p { margin:0; }\n#aiolia-exercise-03 blockquote::before, #aiolia-exercise-03 blockquote::after { content:none; }\n#aiolia-exercise-03 .ae-dashboard { border:1px solid #d9d9d9; }\n#aiolia-exercise-03 .ae-score { display:flex; align-items:center; justify-content:space-between; gap:1rem; padding:1.25rem 1.5rem; background:var(--ae-soft); border-bottom:1px solid #d9d9d9; }\n#aiolia-exercise-03 .ae-score-label { font-weight:600; font-size:.9em; }\n#aiolia-exercise-03 .ae-score-value { white-space:nowrap; font-weight:700; font-size:1.5em; line-height:1.4; }\n#aiolia-exercise-03 .ae-score-value small { display:block; font-size:.5em; font-weight:600; text-transform:uppercase; letter-spacing:.03em; }\n#aiolia-exercise-03 .ae-dashboard table { width:100%; margin:0; border:0; border-collapse:collapse; font-size:.9em; line-height:1.6; table-layout:fixed; }\n#aiolia-exercise-03 .ae-dashboard th, #aiolia-exercise-03 .ae-dashboard td { padding:1rem; border:0; border-bottom:1px solid #dedede; text-align:left; vertical-align:top; overflow-wrap:break-word; }\n#aiolia-exercise-03 .ae-dashboard thead th { font-size:.85em; font-weight:700; }\n#aiolia-exercise-03 .ae-dashboard tbody th { font-weight:600; }\n#aiolia-exercise-03 .ae-dashboard tbody tr:last-child > * { border-bottom:0; }\n#aiolia-exercise-03 .ae-mobile-label { display:none; }\n@media(max-width:600px) {\n  #aiolia-exercise-03 .ae-facts { grid-template-columns:1fr; }\n  #aiolia-exercise-03 .ae-facts > div { padding:.85rem 0; }\n  #aiolia-exercise-03 .ae-score { align-items:flex-start; flex-direction:column; padding:1.1rem; gap:.6rem; }\n  #aiolia-exercise-03 .ae-dashboard table, #aiolia-exercise-03 .ae-dashboard tbody, #aiolia-exercise-03 .ae-dashboard tr, #aiolia-exercise-03 .ae-dashboard th, #aiolia-exercise-03 .ae-dashboard td { display:block; width:auto; }\n  #aiolia-exercise-03 .ae-dashboard thead { position:absolute; width:1px; height:1px; overflow:hidden; clip-path:inset(50%); }\n  #aiolia-exercise-03 .ae-dashboard tbody tr { padding:1.1rem; border-bottom:1px solid #dedede; }\n  #aiolia-exercise-03 .ae-dashboard tbody tr:last-child { border-bottom:0; }\n  #aiolia-exercise-03 .ae-dashboard tbody tr > * { padding:0; border:0; }\n  #aiolia-exercise-03 .ae-dashboard tbody th { margin-bottom:.65rem; }\n  #aiolia-exercise-03 .ae-dashboard tbody td + td { margin-top:.65rem; }\n  #aiolia-exercise-03 .ae-mobile-label { display:block; font-size:.8em; font-weight:600; }\n  #aiolia-exercise-03 blockquote { padding:1.1rem; }\n}\n<\/style>\n\n<div id=\"aiolia-exercise-03\" lang=\"en\">\n  <p class=\"ae-label\">Mock review exercise 3<\/p>\n  <nav class=\"ae-index\" aria-label=\"Exercise sections\">\n    <a href=\"#ae03-summary\">Project summary<\/a>\n    <a href=\"#ae03-design\">Technical design<\/a>\n    <a href=\"#ae03-incident\">Pilot incident<\/a>\n    <a href=\"#ae03-dashboard\">Dashboard example<\/a>\n    <a href=\"#ae03-task\">Reviewer\u2019s task<\/a>\n  <\/nav>\n  <dl class=\"ae-facts\" aria-label=\"Project details\">\n    <div><dt>Type<\/dt><dd>AI R&amp;D pilot in workplace cybersecurity<\/dd><\/div>\n    <div><dt>Duration<\/dt><dd>18 months<\/dd><\/div>\n    <div><dt>Applicant<\/dt><dd>PhiShield with partner company NorthBridge<\/dd><\/div>\n    <div><dt>Purpose<\/dt><dd>email security and staff cyber-risk management<\/dd><\/div>\n    <div><dt>Output<\/dt><dd>phishing susceptibility score plus behavioural labels<\/dd><\/div>\n    <div><dt>Review status<\/dt><dd>submitted for ethics review after a pilot incident<\/dd><\/div>\n  <\/dl>\n  <section id=\"ae03-summary\" aria-labelledby=\"ae03-summary-title\">\n    <h2 id=\"ae03-summary-title\">Project summary<\/h2>\n    <p class=\"ae-prose\">PhiShield is an AI-supported cybersecurity system designed to reduce phishing and business-email compromise in large organisations. It combines email metadata, click behaviour in simulated phishing exercises, training-test performance, and workplace communication patterns to generate a phishing susceptibility score for employees.<\/p>\n    <p class=\"ae-prose\">It also produces behavioural labels such as \u201cauthority responsive\u201d, \u201curgency reactive\u201d, or \u201cprocedurally compliant\u201d. The applicant states that the system is intended as a decision-support tool for security awareness and risk mitigation, not as an autonomous decision-maker.<\/p>\n  <\/section>\n  <section id=\"ae03-design\" aria-labelledby=\"ae03-design-title\">\n    <h2 id=\"ae03-design-title\">Technical design<\/h2>\n    <p class=\"ae-prose\">The model is trained on historical enterprise email events from three multinational firms. It uses features such as response patterns, deviation from workflow, phishing-test behaviour, escalation habits, and linguistic markers in replies.<\/p>\n    <p class=\"ae-prose\">The system produces a risk score from 0 to 100 and a short natural-language explanation based on contributing features. Confidence scores are logged internally but are not shown to affected employees. PhiShield states that protected attributes are not used directly, but job role, seniority, language, and reporting structure may influence the model.<\/p>\n  <\/section>\n  <section id=\"ae03-incident\" aria-labelledby=\"ae03-incident-title\">\n    <h2 id=\"ae03-incident-title\">Pilot incident<\/h2>\n    <p class=\"ae-prose\">At NorthBridge, a new department manager excluded a senior executive assistant with twenty years of service from the Executive Committee after the system flagged her for authority bias. The manager explained that people who strongly follow leadership instructions were considered more likely to comply with a spoofed executive request.<\/p>\n    <p class=\"ae-prose\">The employee had not been informed in advance that behavioural security scores could affect committee membership, received only a brief managerial explanation, and was given no appeal route. They interpreted the incident as a stigmatizing judgment that mispresented loyalty and procedural discipline as a defect.<\/p>\n    <p class=\"ae-prose\">When reporting pilot results back to PhiShield, NorthBridge security department included the following statement:<\/p>\n    <blockquote><p>\u201cBusiness email compromise and targeted phishing cost our industry billions annually, and the tactics are evolving faster than our brains can keep up with. Information security is an entirely new risk that cannot be adequately understood by senior staff trained decades ago in a different environment. This software is working exactly as intended. In just the pilot phase, we&#8217;ve seen a 19% reduction in successful phishing-test clicks.\u201d<\/p><\/blockquote>\n  <\/section>\n  <section id=\"ae03-dashboard\" aria-labelledby=\"ae03-dashboard-title\">\n    <h2 id=\"ae03-dashboard-title\">Dashboard example<\/h2>\n    <div class=\"ae-dashboard\">\n      <div class=\"ae-score\"><span class=\"ae-score-label\">Overall phishing susceptibility score<\/span><span class=\"ae-score-value\">90 \/ 100 <small>Very high risk<\/small><\/span><\/div>\n      <table role=\"table\" aria-label=\"Dashboard behavioural indicators\">\n        <colgroup><col style=\"width:24%\"><col style=\"width:25%\"><col style=\"width:51%\"><\/colgroup>\n        <thead role=\"rowgroup\"><tr role=\"row\"><th scope=\"col\" role=\"columnheader\">Indicator<\/th><th scope=\"col\" role=\"columnheader\">Behaviour<\/th><th scope=\"col\" role=\"columnheader\">Explanation<\/th><\/tr><\/thead>\n        <tbody role=\"rowgroup\">\n          <tr role=\"row\"><th scope=\"row\" role=\"rowheader\">Primary indicator<\/th><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Behaviour<\/span>Authority Responsive<\/td><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Explanation<\/span>User exhibits high compliance with leadership directives.<\/td><\/tr>\n          <tr role=\"row\"><th scope=\"row\" role=\"rowheader\">Other indicators<\/th><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Behaviour<\/span>Rapid Response Time<\/td><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Explanation<\/span>Response time to executive emails is in the 95th percentile (Avg: &lt; 3 mins).<\/td><\/tr>\n          <tr role=\"row\"><th scope=\"row\" role=\"rowheader\">Other indicators<\/th><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Behaviour<\/span>Workflow Adherence<\/td><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Explanation<\/span>Extremely low frequency of deviation from formal workflow.<\/td><\/tr>\n          <tr role=\"row\"><th scope=\"row\" role=\"rowheader\">Other indicators<\/th><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Behaviour<\/span>Linguistic Markers<\/td><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Explanation<\/span>High use of deferential linguistic markers in replies (e.g., &#8220;Right away,&#8221; &#8220;As you requested&#8221;).<\/td><\/tr>\n          <tr role=\"row\"><th scope=\"row\" role=\"rowheader\">Escalation patterns<\/th><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Behaviour<\/span>Low<\/td><td role=\"cell\"><span class=\"ae-mobile-label\" aria-hidden=\"true\">Explanation<\/span>Rarely transfers unusual requests to IT or other colleagues.<\/td><\/tr>\n        <\/tbody>\n      <\/table>\n    <\/div>\n  <\/section>\n  <section id=\"ae03-task\" class=\"ae-task\" aria-labelledby=\"ae03-task-title\">\n    <h2 id=\"ae03-task-title\">Reviewer\u2019s task<\/h2>\n    <ol>\n      <li>Using the Checklist, identify serious and complex ethics issues and map them under the relevant ALTAI requirements.<\/li>\n      <li>Using the Portfolio, propose up to 8 measures to address these issues.<\/li>\n      <li>Detect potential ethics tension(s) in between the ALTAI ethics requirements.<\/li>\n    <\/ol>\n  <\/section>\n  <p class=\"ae-footer\"><a href=\"#aiolia-exercise-03\">Back to the top<\/a><\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Source<\/strong>: A. Pr\u00e9gent and A. Grinbaum, <em>Developing Competency in AI Ethics: A training framework<\/em>. <a href=\"https:\/\/arxiv.org\/abs\/2610.13319\" target=\"_blank\" rel=\"noopener\">arxiv:2610.13319<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Mock review exercise 3 Project summary Technical design Pilot incident Dashboard example Reviewer\u2019s task Type AI R&amp;D pilot in workplace cybersecurity Duration 18 months Applicant PhiShield with partner company NorthBridge Purpose email security and staff cyber-risk management Output phishing susceptibility score plus behavioural labels Review status submitted for ethics review after a pilot incident Project&hellip;&nbsp;<a href=\"https:\/\/aiolia.eu\/index.php\/mock-review-exercise-ai-for-organisational-email-security\/\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">Mock review exercise: AI for Organisational Email Security<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"footnotes":""},"class_list":["post-927","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/pages\/927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/comments?post=927"}],"version-history":[{"count":2,"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/pages\/927\/revisions"}],"predecessor-version":[{"id":957,"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/pages\/927\/revisions\/957"}],"wp:attachment":[{"href":"https:\/\/aiolia.eu\/index.php\/wp-json\/wp\/v2\/media?parent=927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}