DeRexi: Policy Pilot
A policy-governance and security-assistance project designed to help employees find trusted policy guidance, identify the appropriate policy owner, and respond appropriately when a potential security incident occurs.
Connecting employees with trusted guidance.
DeRexi: Policy Pilot is a policy-governance assistant currently being developed as part of my cybersecurity project work. The goal is to help employees locate relevant company policies, receive clear policy-based guidance, and understand who to contact when additional clarification is needed.
The project is designed around a common organizational challenge: employees may know that a policy exists but still have difficulty locating the correct document, understanding the guidance, identifying the policy owner, or knowing what action to take when a situation may involve a security incident.
- Focus: Information Security
- Area: Policy Governance
- Security Component: Incident Assistance
- Status: MVP In Development
- Year: 2026
When policy exists, but the next step is unclear.
Employees may encounter situations where they need policy guidance quickly but are unsure which document applies, whether the information they found is current, or who owns the policy.
That uncertainty becomes especially important when an employee reports something that could represent a security incident, such as clicking a suspicious or phishing-related link. In those situations, the experience should move beyond ordinary policy lookup and guide the employee toward approved incident-reporting and escalation steps.
From employee question to appropriate action.
The planned MVP allows an employee to submit a question and receive an answer based on approved company policy information. The experience is designed to show the relevant policy source and provide access to the appropriate policy owner or department contact.
When a question cannot be answered confidently, the workflow is designed to support clarification instead of presenting uncertain information as fact. Employees can be guided toward the correct contact, and separate email workflows can support clarification requests and policy-owner notifications when necessary.
Policy Management
Store and manage approved policy documents so employees can receive guidance from trusted organizational sources.
Policy Search & Retrieval
Help identify relevant policy information based on an employee's question and return the supporting source.
Clarification & Routing
Connect employees with the appropriate policy owner or department when a question requires additional clarification.
Incident Assistance
Recognize potential incident-related language and provide approved reporting and escalation guidance.
Policy Health Dashboard
Give administrators visibility into the overall health of the policy environment by surfacing policy status, ownership, review needs, employee feedback, and areas where guidance may require clarification or improvement.
A closer look at the core experience.
01
Policy Management
DeRexi is designed to organize approved company policies and maintain trusted policy information so employees are guided by the correct organizational sources. This creates the foundation for reliable retrieval, ownership tracking, and future version management.
02
Policy Search & Retrieval
Employees can ask questions in everyday language while DeRexi works to identify the most relevant approved policy guidance and supporting source, reducing the need to search through multiple documents manually.
03
Clarification & Routing
When DeRexi cannot confidently resolve a question, the workflow is designed to avoid guessing. Instead, employees can see the appropriate policy owner or department and use dedicated clarification workflows to reach the right person.
04
Incident Assistance
When employee language suggests a potential security incident, DeRexi is designed to recognize that the situation requires more than ordinary policy lookup and direct the employee toward approved reporting and escalation guidance.
05
Policy Health Dashboard
The dashboard gives administrators visibility into policy ownership, review needs, employee feedback, and recurring areas of confusion so they can identify where policies may need clarification, attention, or improvement.
Designing security around people, process & technology.
Developing DeRexi is helping me think beyond a single technical feature and consider how multiple parts of a security solution work together. The project includes requirements gathering, workflow design, policy governance, data organization, access considerations, user experience, incident-response thinking, and future testing.
It is also reinforcing an important part of my approach to cybersecurity: effective security guidance should help people understand what to do next, not simply give them more information to interpret on their own.
Currently moving through the SDLC.
DeRexi: Policy Pilot is currently being developed through a structured 12-week software development lifecycle. The MVP is progressing from planning and system design into backend development, document management, policy retrieval, user-interface development, routing, incident assistance, security hardening, testing, documentation, and final release.