In an organization's security detection architecture, employees who observe and report phishing emails act as human ________ by providing early signals of potential incidents.

### Why this is right The material describes end users as highly effective sensors because they may notice suspicious messages or activity before automated systems do. ### The concept A detection sensor is a source of information that can reveal a possible event. Sensors may be technical systems, but people are also useful sources. For example, a user may recognize a suspicious email and report it for investigation. A report is a signal to assess, not automatic confirmation of an incident. ### Terms - **Sensor**: A source that observes or reports information relevant to detection. ### Remember Detection can begin with a person noticing something unusual.