Organizational Behavior

Organizational Behavior is WitnessAI’s modeled multi-prompt aware guardrail. The purpose of this guardrail is to examine an employee’s prompts and score various “meta” behaviors. For example, an employee that may wish to leave the company. When this guardrail detects these activities, it provides the option to create an Alert in the Witness Console, or push an event to a supported SIEM tool.

Behavioral Alerts

Detection Criteria
A behavior is flagged when an employee's prompts match it three or more times within 7 days.

The behaviors below are the ones listed in the Select Behavior Types panel. WitnessAI maintains this list, so it can vary by tenant.

Burnout Risk

Intention

Detect signs of disengagement, low morale, or burnout in employees.

Detection Criteria

Repeated queries like these may indicate potential burnout or disengagement from their role.

Potentially Departing Employee

Intention
Track signs of an employee seeking to reskill or transition to a different career path, either internally or externally.

Detection Criteria
Prompts related to learning new skills or transitioning careers may indicate an intention to change job roles or industries.

Workplace Conflict

Intention
Track potential signs of internal conflict or dissatisfaction with colleagues or management.
Detection Criteria
Queries related to conflict resolution, workplace issues, or reporting problems might signal potential internal conflict or growing dissatisfaction.

Freelance / Side Work

Intention
Detect whether an employee is exploring side projects, freelancing, or moonlighting opportunities.

Detection Criteria
Prompts about side projects or freelancing could indicate a divided focus or intention to pursue outside work.

Malicious Intent

Intention
Detect malicious intentions, such as fraud, insider threats, or deliberate harm to the company.
Detection Criteria
High-risk prompts related to fraudulent activities or deliberate harm could signal malicious insider activity.

Knowledge Hoarding

Intention
Identify when an employee is hoarding or monopolizing knowledge for leverage or improper reasons.

Detection Criteria
Queries related to hiding or withholding information could signal knowledge hoarding or potential misuse of internal resources.

Violation of Company Policies

Intention
Identify potential behaviors indicating that an employee may be attempting to bypass or violate company policies.

Detection Criteria
Prompts of these types could signal a potential intention to violate security or company policies.

Using Organizational Behavior Step-by-Step

This section covers details on the Organizational Behavior guardrail, and how to add it to a policy. Refer to the Policy Creation page for how to create Policies.

Add an Organizational Behavior guardrail

After creating a Policy

Click the Guardrails tab in the policy editor.
Select the Organizational Behavior guardrail from the available options.
Click the slide button to enable the guardrail.
Click Add Behavior Type to open the Select Behavior Types panel, check the behaviors this rule should detect, and click Save in the panel.
Under Set severity to, choose the rule's severity: High, Medium or Low.
To score other behaviors at a different severity, click Add Rule and repeat steps 4 and 5.
Save the configuration.

The Organizational Behavior guardrail configured in a policy.

The Select Behavior Types panel listing Burnout Risk, Potentially Departing Employee, Workplace Conflict, Freelance / Side Work, Malicious Intent, Knowledge Hoarding and Violation of Company Policies.

Organizational Behavior guardrail Behavioral Alerts Burnout Risk Potentially Departing Employee Workplace Conflict Freelance / Side Work Malicious Intent Knowledge Hoarding Violation of Company Policies Using Organizational Behavior Step-by-Step Add an Organizational Behavior guardrail