In Behavior Rules, any employee could potentially be selected in the Notify field. As a security precaution, it would be valuable to control the recipients that populate as options for notifying.
Perhaps, in Settings, you could specify all the possible individuals/Departments who could appear as options in Rule Action\ Notify fields. Furthermore, this functionality could also include referencing lists of names as suggested in TM-I-579 Reference a List of Admin/Manager Emails in the Notify Field in Behavior Rule Actions (https://wishlist.teramind.co/ideas/TM-I-579)