Actions
Every way to act on human risk.In one place.
Training, simulations, nudges, scorecards, policy and the controls in your stack. Livvy proposes the action, a person approves it, and a playbook runs it.
Security leaders at
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20185.6%2073.2'%20style='enable-background:new%200%200%20185.6%2073.2;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%2300095B;}%20%3c/style%3e%3cg%20id='Ford_Script'%3e%3cpath%20class='st0'%20d='M185.5,22c0.2-0.4,0-0.6-0.5-0.6c-2.4,0-5.5,0-8,0c-0.6,0-0.9,0.1-1.2,0.6c-0.9,1.8-12.1,18.5-14.2,21.8%20c-0.4,0.5-0.8,0.4-0.8-0.1c-0.2-1.9-1.9-4.2-4.5-5.2c-2-0.8-4-1-6-0.7c-3.7,0.5-7,2.4-9.8,4.6c-4.3,3.3-8.1,7.6-12.9,10.7%20c-2.6,1.7-6.3,3.2-8.7,1c-2.2-2-1.9-6.5,1.4-10c0.3-0.4,0.8-0.1,0.7,0.3c-0.3,1.6,0.1,3.1,1.3,4.2c1.5,1.3,3.5,1.5,5.3,0.6%20c2.1-1,3.3-3.1,3.7-5.4c0.6-3.6-2.2-6.7-5.6-6.9c-2.8-0.2-5.5,0.8-8.1,2.9c-1.3,1.1-2,1.9-3.2,3.5c-0.3,0.4-0.7,0.4-0.7-0.1%20c0.1-4.6-1.7-7.1-5.5-7.2c-2.9-0.1-6,1.5-8.5,3.5c-2.7,2.1-5,5-7.5,7.7c-0.3,0.3-0.6,0.3-0.7-0.3c-0.1-3-0.8-5.9-2.2-8%20c-0.5-0.7-1.5-1.1-2.4-0.6c-0.4,0.2-1.8,0.9-2.8,1.7c-0.5,0.4-0.7,1-0.5,1.8c1.3,4.5,1,9.6-0.8,14c-1.7,4-4.9,7.5-8.8,8.8%20c-2.5,0.8-5.2,0.4-6.8-1.8c-2.2-3.1-1.3-8.5,2-12.9c2.9-3.9,7.2-6.4,11.4-8c0.5-0.2,0.6-0.5,0.5-0.9c-0.2-0.7-0.6-1.6-0.7-2.1%20c-0.4-1-1.5-1.2-2.8-1.1c-3.1,0.4-5.9,1.4-8.6,2.9c-7.2,3.8-10.8,11.3-12.4,15.3c-0.8,1.9-1.4,3.1-2.2,4.2c-1.1,1.4-2.6,2.7-5.2,5%20c-0.2,0.2-0.4,0.6-0.2,1c0.3,0.5,1.6,2.5,2,2.6c0.4,0.2,0.9-0.1,1.1-0.2c1.8-1.2,4-3.2,5.1-4.5c0.4-0.4,0.8-0.3,1,0.4%20c1,3.5,3.6,6.4,7.2,7.7c6.6,2.2,13.4-1,18.6-6.6c3.3-3.6,4.5-5.8,5.7-7.4c2.1-2.6,6.3-8.5,11.3-12.3c1.8-1.4,4-2.5,5.1-1.8%20c0.9,0.6,1.2,1.9-0.2,4.4c-5.1,9.3-12.6,20.3-14,22.9c-0.2,0.5,0,0.8,0.4,0.8c2.7,0,5.3,0,7.7,0c0.4,0,0.6-0.2,0.8-0.5%20c3.9-6.1,7.6-12,11.5-18c0.2-0.4,0.4-0.1,0.4,0.1c0.1,1.4,0.4,3.3,1.3,4.6c1.5,2.3,3.6,3.3,6,3.3c1.9,0,2.8-0.3,4.8-1%20c1.6-0.6,3-1.4,4-2.1c0.6-0.4,0.7,0.3,0.7,0.4c-0.9,4.9,0.2,10.6,5,13c5.8,2.8,12.1-1.2,15.8-4.8c0.4-0.3,0.7-0.3,0.8,0.4%20c0.1,1.4,0.7,3,1.8,4.2c3.1,3.1,9.2,1.9,15.5-2.9c4-3.1,8.2-7.4,11.9-12c0.1-0.2,0.2-0.5,0-0.7c-0.6-0.6-1.4-1.3-2-1.8%20c-0.3-0.2-0.6-0.2-0.9,0c-3.9,3.7-7.3,7.9-12.4,11.3c-1.7,1.2-4.4,2.1-5.6,0.5c-0.5-0.6-0.4-1.5,0.1-2.7%20C161.1,59.5,184.3,24.1,185.5,22z%20M154.9,51.7c0.1,0.3,0.4,0.5,0.7,0.7c0.1,0,0.2,0.1,0.1,0.4c-1,2.1-1.9,3.3-3.1,5.2%20c-1.1,1.7-2.4,3-4,4.3c-2.3,1.9-5.6,4-8.3,2.6c-1.2-0.6-1.7-2.3-1.7-3.6c0.1-3.8,1.7-7.7,4.9-11.5c3.8-4.7,8-7.1,10.8-5.8%20c2.9,1.4,1.9,4.7,0.7,7.3C154.8,51.3,154.8,51.5,154.9,51.7z'/%3e%3cpath%20class='st0'%20d='M17.2,71.8C8.6,71.8,1,66.5,0.1,57.2c-0.5-5.1,1-9.7,3.9-13.5c2.6-3.3,6.9-6.1,10.6-6.8%20c1.2-0.2,2.8-0.1,3.5,0.7c1,1.2,0.7,2.5-0.3,3.1c-2.8,1.4-6.2,3.9-7.9,7.2c-1.4,2.7-1.6,6,0.4,9.2c3.5,5.2,13.2,5.4,22.2-3%20c2.2-2,4.2-4,6.2-6.3c4-4.5,5.3-6.2,10.6-13.5c0.1-0.1,0.1-0.2,0.1-0.2c0-0.1-0.1-0.1-0.3-0.1c-3.5,0.1-6.6,1.1-9.6,3.4%20c-0.9,0.6-2.1,0.5-2.6-0.3c-0.6-0.9-0.2-2.1,0.8-2.8c4.8-3.3,10-3.9,15.4-4.8c0,0,0.4,0,0.7-0.4c2.2-2.8,3.9-5.4,6.2-8.2%20c2.4-2.9,5.4-5.5,7.7-7.5c3.2-2.8,5.3-3.7,7.4-4.9c0.6-0.3-0.1-0.6-0.2-0.6C63.1,5.5,50.8,2.6,39,7c-8.1,3-11.7,9.5-10,13.8%20c1.2,3.1,5.2,3.5,9,1.7c3.1-1.5,6-4,8.1-7.2c1.1-1.8,3.6-0.5,2.3,2.6c-3.4,8.1-10,14.5-18,14.8c-6.8,0.2-11.2-4.8-11.2-11%20c0-12.2,13.6-20.2,27.8-21.4c17.2-1.4,33.4,3.1,50.5,5.2c13.1,1.6,25.6,1.6,38.7-1.4c1.5-0.3,2.6,0.6,2.5,2.2%20c-0.1,2.3-1.9,4.4-6.2,6.8c-4.9,2.7-10.1,3.5-15.4,3.6c-13,0.1-25.1-5-37.6-7.7c0,0.5,0.2,1.2-0.3,1.5C72.3,15.7,66,20.9,61.8,28.2%20c-0.1,0.2-0.1,0.3,0.2,0.3c3.6-0.2,6.9-0.3,10.3-0.6c0.6,0,0.6-0.2,0.6-0.6c-0.3-2.5,0.4-5.4,2.6-7.4c2.3-2,5.1-2.3,7-0.8%20c2.1,1.7,1.9,4.7,0.8,6.9c-1.2,2.3-3.1,3.5-5,4.1c0,0-0.4,0.1-0.3,0.4c0.1,0.6,2.6,2,2.9,2.4c0.2,0.4,0.1,0.9-0.3,1.3%20c-0.3,0.3-0.7,0.6-1.2,0.6c-0.4,0-0.7-0.2-1.3-0.5c-1.1-0.6-2.6-1.6-3.6-2.9c-0.3-0.4-0.5-0.4-1.3-0.4c-3.7,0.2-9.4,0.8-13.3,1.2%20c-0.9,0.1-1.1,0.3-1.3,0.6c-6.2,10.2-12.8,21.3-20.1,28.6C30.6,69.6,24.1,71.7,17.2,71.8z%20M76.4,26.3c0.1,0.5,0.3,0.6,0.5,0.6%20c1.2-0.2,2.5-1.2,3.2-2.3c0.7-1,1-2.5,0.3-3.1c-0.6-0.5-1.6-0.4-2.4,0.3C76.6,23.1,76.2,24.9,76.4,26.3z'/%3e%3c/g%3e%3c/svg%3e){kind=small}
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20300%20299.9'%20style='enable-background:new%200%200%20300%20299.9;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%23CC0000;}%20%3c/style%3e%3cpath%20class='st0'%20d='M0.1,150C0.1,67.1,67.2,0,150,0c82.8,0,150,67.1,150,150c0,82.8-67.2,150-150,150C67.2,299.9,0.1,232.8,0.1,150%20z%20M150,249.9c55.2,0,100-44.8,100-100c0-55.2-44.8-100-100-100C94.8,50,50,94.8,50,150C50,205.2,94.8,249.9,150,249.9z%20M200,150%20c0,27.6-22.4,50-50,50s-50-22.4-50-50s22.4-50,50-50S200,122.4,200,150L200,150z'/%3e%3c/svg%3e){kind=small}
The Act step
Predict. Guide. Act. Prove.This is where risk goes down.
Intelligence finds who is driving risk. Livvy proposes the next move and a person approves it. Then a playbook runs it, and the result shows on the scorecards.
- PredictIntelligenceWho is driving risk, and why.
- GuideLivvyProposes the next move. A person approves.
- Act · this pageActionsPlaybooks run every action below.
- ProveReportingOutcomes, from the employee to the board.
- 01TrainingThe right module for the person whose risk calls for it.
- 02SimulationsEmail, QR, SMS, voice and calendar, with a teachable moment.
- 03Nudges and coachingA message in Slack, Teams or email, at the moment it helps.
- 04ScorecardsFeedback each person, manager and executive sees.
- 05Control orchestrationRisk signals and control changes sent to your tools.
- 06PolicyYour AI use policy, turned into approved decisions.
For people
Help the person.Coaching first, never blame.
The person who approves payments gets the voice phishing test. The team that keeps clicking gets an escape room. Every result flows back into the Human Risk Index, so the next action adjusts to it.
Training aimed by risk, not by the calendar.
A playbook assigns the right training to the person whose risk calls for it. Reminders skip people who already finished.
- Security Awareness Training: a library of award-winning series and micro-learning.
- Content Studio: custom training on your brand in minutes, approved by a person before anyone is assigned it.
- Team experiences: CyberEscape Online and VTX, the Virtual Tabletop Experience.
- SCORM export to any LMS you already run.
Simulations on the channels attackers use.
Test the people attackers will target, the way they will target them. Every click opens a teachable moment: the message, with the cues they missed.
- Living Security Phishing: email and QR, with Phishing Autopilot setting the difficulty for each person, and calendar invites whose Teams meeting link opens a voice deepfake simulation your team designs.
- Voice Phishing (Vishing): AI phone calls that talk back, then coach.
- SMS Phishing: two-way texts with link, reply and callback lures.
- Every report gets a thank-you, and report rate counts more than clicks.
A nudge at the moment it helps.
Just-in-time nudges reach people in Slack, Microsoft Teams and email. Managers get a notice only when a problem repeats, and every report gets a thank-you.
- Just-in-time nudges tied to the signal that triggered them.
- Manager notices, sent only when a problem repeats.
- Thank-yous for reporting, so vigilance shows on the scorecard.
Scorecards that change behavior.
Feedback is an action too. Share each person’s own score with them, and they own it: where they stand, why, and how to improve. Managers see their team’s, and executives see the trend.
- Employee, manager and executive scorecards, customized with any signal or cohort.
- Their Human Risk Index or a behavior score you define, with the top reasons and one next step. Or levels in words only, if you prefer.
- Coaching, never a ranking. Only the person and the people you authorize see it.
Controls and policy
Push the right control into your stack.With a person’s approval.
Living Security sends risk signals and control changes to your tools, so each person’s protection tightens or relaxes with their risk. If a tool in your stack can take an action, a playbook can trigger it.
Identity
Step-up MFA, a credential reset or conditional access
Okta, Microsoft Entra ID
Identity governance
An entitlement update or an access review
SailPoint
Web gateway and CASB
A stricter web or cloud policy for a cohort
Netskope, Zscaler
IT service management
A ticket to the person who owns the fix
ServiceNow, Jira Service Management
Collaboration
A nudge, a manager notice or a post to a channel
Slack, Microsoft Teams
Everything else
A tighter DLP or email policy, a watch list, a case
Any tool in your stack
This is adaptive protection: access changes wait for a person’s approval, and every action is logged with its evidence.
Turn your AI use policy into decisions.
Upload your AI use policy. Livvy proposes the approved and unapproved vendors, quoting the line of the policy as evidence, and flags conflicts between documents. A person approves every entry, and every decision is audited.
- A nudge, not a ban: misuse counts as risk, approved use counts as protective, and simply using AI is neutral.
- Policy training in your own words: Content Studio’s word-for-word mode, with a record of which policy version each person acknowledged.
Playbooks
Playbooks run every action.Each one has an owner.
A playbook is a defined action with an accountable owner and the metric that proves it worked. Every playbook is Easy, Medium or Hard, so you start with quick wins and add more as your tools connect.
- Easy
A quick win (an Easy playbook): low effort, with the tools you already run.
“Send a nudge inside 24 hours of a simulation click”
Owner: Security awareness lead
- Medium
Moderate effort: some setup, or a second team.
“Target repeat clickers and the Critical cohort”
Owner: Security awareness lead
- Hard
High effort: an integration, or a team outside security.
“Interrupt the phish-to-takeover sequence at step three”
Owner: Identity team
One playbook, end to end: signal, cohort, Livvy’s proposal, approval, actions, result
Customer proof
Act on the risk.Show it went down.
Blackbaud brought threat detection, data loss prevention and survey data into one view of human risk. At HRMCon 2026, Stewart Title showed how it enforces controls through the security tools it already owns.
“I wanted to be held accountable—are we actually moving the needle, or just checking a box?”
“Living Security is already incorporated, it already has all the connections to all of our security tools… [I] start enforcing different policies and different security controls using technology that I already own.”
The 2026 Human Risk Report
What targeted action changed.
Research with the Cyentia Institute across 100+ organizations, 4.9M identities, 55.9M signals. Named Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024.
68%
Less time in a risky state after targeted action.2026 Human Risk Report with the Cyentia Institute
25–30%
Drop in the share of risky users in the first six months.2026 Human Risk Report with the Cyentia Institute
Questions
Human risk actions, answered.
What actions can Living Security take on human risk?
Six types, from one platform: training assigned by risk (the Security Awareness Training library, Content Studio modules, CyberEscape Online and VTX for teams), phishing (email, QR and calendar), voice and SMS simulations with a teachable moment, just-in-time nudges and manager notices in Slack, Microsoft Teams and email, employee, manager and executive scorecards, the AI Use Policy, and control changes sent to the tools in your security stack. Playbooks run them.
Does Livvy act on its own?
No. Livvy, our AI security analyst, proposes the action with the evidence behind it. A person on your team approves it, or edits it first, and a playbook runs it. Access changes wait for a person’s approval, and every action is logged with its evidence.
Which tools can a playbook act in?
Living Security sends risk signals and control changes to your tools, so each person’s protection tightens or relaxes with their risk. Examples include Okta and Microsoft Entra ID, SailPoint, Netskope and Zscaler, ServiceNow and Jira Service Management, and Slack and Microsoft Teams. If a tool in your stack can take an action, a playbook can trigger it.
What is a playbook?
A defined action with an accountable owner and the metric that proves it worked. Every playbook is Easy, Medium or Hard. A quick win is an Easy playbook, so most programs start there and add Medium and Hard playbooks as more tools connect.
Do employees see a risk score?
Yes, if you choose. Many customers share each person’s Human Risk Index, or a behavior score they define, on that person’s own scorecard: where they stand, why, and how to improve. It’s one of the strongest drivers of behavior change and ownership we see. You can also show levels in words only. Either way it’s coaching, never punishment, and never a public ranking.
Can we keep training in our own LMS?
Yes. Training exports by SCORM to any LMS, including SCORM 2004 and playlists, and you can import your own SCORM content.
Act on human riskbefore it escalates.
See Livvy propose the action, your team approve it and a playbook run it, on the tools you already run.