Platform

Unify HRM Overview

Platform

Capabilities

Identify: Human Risk Operations Center (HROC)
Dashboards

Power Insights

Benchmarks

Protect: Action Plans
Nudges: Communications & Employee Scorecards

Training: Risk Based SAT and Phishing

Orchestration: Policy Playbooks

Report: Human Risk Index (HRI)
Employee Scorecards

Manager Reporting

Board and Executive Reporting

Bundles

Unify Go
Start your journey to HRM here.

Monitor risk by:

Security Training Compliance

Phishing and Email

Unify Enterprise
Covers risk in Unify Go and adds:

Malware & Ransomware

Data Loss

Account Takeover

Featured Resources

Living Security Blog
What is Attack Surface Management?
link

Living Security Blog
Why Your Team Should Have A Business Continuity Plan
link
Solutions

Solutions Overview

Solutions

By Role

CISO
Provides CISO’s, executives, and boards a complete picture and prioritization of workforce risk by type, department, location, and more.
link

Security Awareness Team
Go beyond training completion and phishing click rates and proactively safeguard your organization from human-induced security incidents.
link

GRC
Identify, resolve and track commonly violated policies with granular accuracy to lower risk and improve workforce compliance.
link

SOC/IR
Unleash the true potential of your human firewall with data-driven insights and action plans that curb threats before they become incidents.
link

By Risk

Training Compliance
Monitor training compliance status for users and segments across the enterprise.
link

Phishing & Email
Identify the users most and least at risk to social engineering attacks and protect them.
link

Malware & Ransomware
Proactively protect users from malware including viruses, worms, Trojan viruses, spyware, adware, and ransomware.
link

Data Loss
Pinpoint when data is at risk of leaving your controlled environment through unauthorized access or malicious intent.
link

Identity Threats
Get visibility into the most susceptible users for account compromise and mitigate their risk.
link
Products

Products

Products Overview
Transform how your organization approaches Security Awareness and Training by shifting to a proactive HRM approach that creates a strong culture of security.

Living Security Blog
What is Attack Surface Management?
link

Unify Human Risk Management
Establish a proactive security loop.
Security Awareness Training
Interactive compliance training for modern threats.
CyberEscape Rooms
Put your team in the center of security scenarios
Cybersecurity Awareness Month
Create a cyber vigilant workforce in October
Cybersecurity Engagement Training Go beyond compliance training Phishing
Stop social engineering attacks in their tracks with realistic simulations and training
across phishing, vishing, smishing, and more.
HRM

HRM

Human Risk Management: Proactive Security
Human Risk Management (HRM) is the process of identifying, assessing, and mitigating risks associated with human behavior in relation to an employee's use of technology.
HRM Maturity Model
How far is your company along the path to true proactive security?

Living Security Blog
What is Attack Surface Management?
link
Resources

Resources

Resources
Level up on Human Risk Management with a comprehensive collection of webcasts, whitepapers, ebooks, and more.
Blog
Access hundreds of informative blogs with deep dives and best practices relating to the full array of cybersecurity risks we face.
Webinars
Watch dozens of webinars tackling some of cybersecurity’s biggest challenges featuring thought leaders from leading organizations.
Case Studies
See how a variety of organizations utilize Living Security’s HRM Platform, Training, and Phishing to reduce risk with proactive defense.

Partners
Human Risk Management Powered by Partners.
Technology Alliance Program
Extend the value of your offering with HRM.
Partner Support
Unlock your potential with our partner hub.

Living Security Community Share HRM best practices Newsroom Read the latest news on Living Security. Support
The more you know, the more you grow.
Why Living Security
Establish a proactive security loop.
Start Now

December 21, 2021

A Holiday Gift from Living Security - Our Most Downloaded Mini-Campaigns in a Box of 2021

Can you believe 2021 is almost over? This year has just flown by! It has also been another jam-packed year of cybersecurity industry news, advances, and major security breaches.

Living Security's Mini-Campaigns in a Box are timely resources focused on major events in the cybersecurity industry. They are meant for Security Awareness Program Owners to provide ad-hoc training for their organizations by adding background and context around some of the biggest cybersecurity stories of the year.

The following resources are a few highlights from our 2021 Mini-Campaigns in a Box. And while the topics they cover may no longer be front-page news, the lessons that can be drawn from them are just as relevant today as the day they were published. We at Living Security would like to wish you Happy Holidays and look forward to seeing you in 2022!

1. Colonial Pipeline Cyberattack

May 2021. In one of the biggest cybersecurity stories of the year, the criminal group DarkSide conducted a ransomware attack on the largest fuel pipeline operator in the United States, Colonial Pipeline. The attack lead to fuel shortages across the country and forced Colonial to pay $4.4 million in ransom.

2. International Fraud Awareness Week

November 2021. Every November since 2000, the Association of Certified Fraud Examiners (ACFE) select one week as "Fraud Week," where hundreds of organizations around the world pledge to spread fraud awareness throughout their companies and communities.

3. JBS Ransomware Attack

June 2021. The world's largest meat processing company, JBS, was forced to pay an $11 million ransom in order to stop a major cyberattack in June this year. JBS, which supplies one-fifth of the meat sold globally, was forced to shut down facilities in the United States, Canada, and Australia. The attack was believed to be perpetrated by the Russia-based cybercriminal group REvil.

4. New Cybersecurity Regulations for the Energy Sector

October 2021. Following President Biden enacting Executive Order 14028, "Improving the Nation's Cybersecurity," the Transportation Security Administration (TSA) has released directives aimed at boosting cybersecurity throughout the energy sector, with an emphasis on pipeline operators. TSA, which is a part of the Department of Homeland Security (DHS), says these directives are to ensure the nation's network of pipelines is as secure as possible from future cyberattacks.

5. Kaseya Ransomware Attack

July 2021. In another attack claimed by the cybercriminal group REvil, American software company Kaseya was targeted. Kaseya provides software for managing networks and other systems infrastructure; due to the nature of the software, the malicious code was able to affect between 800-1500 other businesses who directly use Kaseya's VSA product or utilize an MSP that was affected.

Monthly Content for Your Program

Developing new, fresh content that keeps your team engaged during cybersecurity awareness training can be difficult and time-consuming. That’s why our team at Living Security developed Campaign in a Box.

Receive new content to promote your awareness campaigns every month without the legwork. Request more information about our resources for program owners today or download our 2022 Security Awareness Program Calendar for a look at the upcoming content releases.