Attackers target new staff because they know enough to act and not enough to challenge.
Where this breaks
Colleagues also route exceptions through the new person before boundaries become clear.
The operating move
Give the assistant an authority map, verification language and a protected escalation route on day one.
Value object — The operational card
- Trusted contacts
- Forbidden actions
- Verification routes
- Right to pause
The test
Run a benign CEO-fraud simulation during onboarding. Measure whether the assistant follows hierarchy or process.