Notification about "Security Policy for OCI Console"

Summary:

Content (please ensure you mask any confidential information):

Last month, the CFO of my company received an email about "Security Policy for OCI Console". He should not be receiving this email, I should. I would like to 1) figure out how to stop him from receiving these types of emails and 2) understand what "Security Policy for OCI Console is and how to check it.

I have opened a ticket with Oracle to try to figure this out, but so far, I haven't gotten any answers other than remove his administrator role. While he was listed as the owner during implementation, we removed him from that well over a year ago. I have also rechecked OCI, he is not listed as an administrator anywhere I can find.