The payment run needs fast protection while finance cannot tolerate missing legitimate invoices.
Security wants broad recall of a confirmed campaign while finance requires proof before supplier mail disappears.
Who you’d be doing this for
“Finance has a payment run in ten days, and they keep asking me which invoices vanished.”
Fitri Htwe · Security Operations Analyst
He is responsible for investigating the supplier-compromise campaign and giving finance a defensible account of which messages were remediated.
What is at stake
A confirmed supplier compromise produced 63 suspected messages before a payment run in ten business days. You must weigh broad recall against finance’s need to preserve legitimate invoices.
Why it isn’t already fixed
Every obvious fix costs something else. That’s the part you’d have to decide.
- fraud containment vs invoice continuity
- automated campaign evidence vs human verification
- payment deadline vs precision threshold
- security authority vs finance approval
Why Abnormal AI
The Abnormal AI platform is being judged on whether high-confidence business email compromise remediation can operate at 99% precision under a live payment deadline.
Written with these in mind
Not your kind of problem? 17 more at Abnormal AI, or browse every organization.
This is the setup. The work is inside.
Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.