Before you let an AI agent act for you
AI agents don’t just answer questions — they can read your email, move files and take actions. Give them the same care you’d give a new starter.
- Ask what it can reach: email, calendar, files, finance or customer systems.
- Give it the least access that does the job. Start with read-only if you can.
- Require your approval before it sends, pays, deletes or shares anything.
- Know where its activity is recorded, so you can see what it did.
- Don’t connect your work account to an AI tool your business hasn’t approved.
- Remove its access when you stop using it — check your connected apps regularly.
Based on: The Cyber Express — ASD guidance on agentic AI harnesses · ASD’s ACSC — AI for small business
Related: Review the apps connected to your account
Still stuck after those?
You’ve done the right thing by trying. Send whedo.it a quick note — what you tried, what you saw — and a senior pair of eyes will be on it the same business day.