For financial services and insurance
Wire fraud reaches a person first.See who, before the money moves.
Living Security finds the human and agent risk behind wire fraud and account takeover, acts once a person approves, and shows your examiner the records and your board the trend.
Security teams at
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20185.6%2073.2'%20style='enable-background:new%200%200%20185.6%2073.2;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%2300095B;}%20%3c/style%3e%3cg%20id='Ford_Script'%3e%3cpath%20class='st0'%20d='M185.5,22c0.2-0.4,0-0.6-0.5-0.6c-2.4,0-5.5,0-8,0c-0.6,0-0.9,0.1-1.2,0.6c-0.9,1.8-12.1,18.5-14.2,21.8%20c-0.4,0.5-0.8,0.4-0.8-0.1c-0.2-1.9-1.9-4.2-4.5-5.2c-2-0.8-4-1-6-0.7c-3.7,0.5-7,2.4-9.8,4.6c-4.3,3.3-8.1,7.6-12.9,10.7%20c-2.6,1.7-6.3,3.2-8.7,1c-2.2-2-1.9-6.5,1.4-10c0.3-0.4,0.8-0.1,0.7,0.3c-0.3,1.6,0.1,3.1,1.3,4.2c1.5,1.3,3.5,1.5,5.3,0.6%20c2.1-1,3.3-3.1,3.7-5.4c0.6-3.6-2.2-6.7-5.6-6.9c-2.8-0.2-5.5,0.8-8.1,2.9c-1.3,1.1-2,1.9-3.2,3.5c-0.3,0.4-0.7,0.4-0.7-0.1%20c0.1-4.6-1.7-7.1-5.5-7.2c-2.9-0.1-6,1.5-8.5,3.5c-2.7,2.1-5,5-7.5,7.7c-0.3,0.3-0.6,0.3-0.7-0.3c-0.1-3-0.8-5.9-2.2-8%20c-0.5-0.7-1.5-1.1-2.4-0.6c-0.4,0.2-1.8,0.9-2.8,1.7c-0.5,0.4-0.7,1-0.5,1.8c1.3,4.5,1,9.6-0.8,14c-1.7,4-4.9,7.5-8.8,8.8%20c-2.5,0.8-5.2,0.4-6.8-1.8c-2.2-3.1-1.3-8.5,2-12.9c2.9-3.9,7.2-6.4,11.4-8c0.5-0.2,0.6-0.5,0.5-0.9c-0.2-0.7-0.6-1.6-0.7-2.1%20c-0.4-1-1.5-1.2-2.8-1.1c-3.1,0.4-5.9,1.4-8.6,2.9c-7.2,3.8-10.8,11.3-12.4,15.3c-0.8,1.9-1.4,3.1-2.2,4.2c-1.1,1.4-2.6,2.7-5.2,5%20c-0.2,0.2-0.4,0.6-0.2,1c0.3,0.5,1.6,2.5,2,2.6c0.4,0.2,0.9-0.1,1.1-0.2c1.8-1.2,4-3.2,5.1-4.5c0.4-0.4,0.8-0.3,1,0.4%20c1,3.5,3.6,6.4,7.2,7.7c6.6,2.2,13.4-1,18.6-6.6c3.3-3.6,4.5-5.8,5.7-7.4c2.1-2.6,6.3-8.5,11.3-12.3c1.8-1.4,4-2.5,5.1-1.8%20c0.9,0.6,1.2,1.9-0.2,4.4c-5.1,9.3-12.6,20.3-14,22.9c-0.2,0.5,0,0.8,0.4,0.8c2.7,0,5.3,0,7.7,0c0.4,0,0.6-0.2,0.8-0.5%20c3.9-6.1,7.6-12,11.5-18c0.2-0.4,0.4-0.1,0.4,0.1c0.1,1.4,0.4,3.3,1.3,4.6c1.5,2.3,3.6,3.3,6,3.3c1.9,0,2.8-0.3,4.8-1%20c1.6-0.6,3-1.4,4-2.1c0.6-0.4,0.7,0.3,0.7,0.4c-0.9,4.9,0.2,10.6,5,13c5.8,2.8,12.1-1.2,15.8-4.8c0.4-0.3,0.7-0.3,0.8,0.4%20c0.1,1.4,0.7,3,1.8,4.2c3.1,3.1,9.2,1.9,15.5-2.9c4-3.1,8.2-7.4,11.9-12c0.1-0.2,0.2-0.5,0-0.7c-0.6-0.6-1.4-1.3-2-1.8%20c-0.3-0.2-0.6-0.2-0.9,0c-3.9,3.7-7.3,7.9-12.4,11.3c-1.7,1.2-4.4,2.1-5.6,0.5c-0.5-0.6-0.4-1.5,0.1-2.7%20C161.1,59.5,184.3,24.1,185.5,22z%20M154.9,51.7c0.1,0.3,0.4,0.5,0.7,0.7c0.1,0,0.2,0.1,0.1,0.4c-1,2.1-1.9,3.3-3.1,5.2%20c-1.1,1.7-2.4,3-4,4.3c-2.3,1.9-5.6,4-8.3,2.6c-1.2-0.6-1.7-2.3-1.7-3.6c0.1-3.8,1.7-7.7,4.9-11.5c3.8-4.7,8-7.1,10.8-5.8%20c2.9,1.4,1.9,4.7,0.7,7.3C154.8,51.3,154.8,51.5,154.9,51.7z'/%3e%3cpath%20class='st0'%20d='M17.2,71.8C8.6,71.8,1,66.5,0.1,57.2c-0.5-5.1,1-9.7,3.9-13.5c2.6-3.3,6.9-6.1,10.6-6.8%20c1.2-0.2,2.8-0.1,3.5,0.7c1,1.2,0.7,2.5-0.3,3.1c-2.8,1.4-6.2,3.9-7.9,7.2c-1.4,2.7-1.6,6,0.4,9.2c3.5,5.2,13.2,5.4,22.2-3%20c2.2-2,4.2-4,6.2-6.3c4-4.5,5.3-6.2,10.6-13.5c0.1-0.1,0.1-0.2,0.1-0.2c0-0.1-0.1-0.1-0.3-0.1c-3.5,0.1-6.6,1.1-9.6,3.4%20c-0.9,0.6-2.1,0.5-2.6-0.3c-0.6-0.9-0.2-2.1,0.8-2.8c4.8-3.3,10-3.9,15.4-4.8c0,0,0.4,0,0.7-0.4c2.2-2.8,3.9-5.4,6.2-8.2%20c2.4-2.9,5.4-5.5,7.7-7.5c3.2-2.8,5.3-3.7,7.4-4.9c0.6-0.3-0.1-0.6-0.2-0.6C63.1,5.5,50.8,2.6,39,7c-8.1,3-11.7,9.5-10,13.8%20c1.2,3.1,5.2,3.5,9,1.7c3.1-1.5,6-4,8.1-7.2c1.1-1.8,3.6-0.5,2.3,2.6c-3.4,8.1-10,14.5-18,14.8c-6.8,0.2-11.2-4.8-11.2-11%20c0-12.2,13.6-20.2,27.8-21.4c17.2-1.4,33.4,3.1,50.5,5.2c13.1,1.6,25.6,1.6,38.7-1.4c1.5-0.3,2.6,0.6,2.5,2.2%20c-0.1,2.3-1.9,4.4-6.2,6.8c-4.9,2.7-10.1,3.5-15.4,3.6c-13,0.1-25.1-5-37.6-7.7c0,0.5,0.2,1.2-0.3,1.5C72.3,15.7,66,20.9,61.8,28.2%20c-0.1,0.2-0.1,0.3,0.2,0.3c3.6-0.2,6.9-0.3,10.3-0.6c0.6,0,0.6-0.2,0.6-0.6c-0.3-2.5,0.4-5.4,2.6-7.4c2.3-2,5.1-2.3,7-0.8%20c2.1,1.7,1.9,4.7,0.8,6.9c-1.2,2.3-3.1,3.5-5,4.1c0,0-0.4,0.1-0.3,0.4c0.1,0.6,2.6,2,2.9,2.4c0.2,0.4,0.1,0.9-0.3,1.3%20c-0.3,0.3-0.7,0.6-1.2,0.6c-0.4,0-0.7-0.2-1.3-0.5c-1.1-0.6-2.6-1.6-3.6-2.9c-0.3-0.4-0.5-0.4-1.3-0.4c-3.7,0.2-9.4,0.8-13.3,1.2%20c-0.9,0.1-1.1,0.3-1.3,0.6c-6.2,10.2-12.8,21.3-20.1,28.6C30.6,69.6,24.1,71.7,17.2,71.8z%20M76.4,26.3c0.1,0.5,0.3,0.6,0.5,0.6%20c1.2-0.2,2.5-1.2,3.2-2.3c0.7-1,1-2.5,0.3-3.1c-0.6-0.5-1.6-0.4-2.4,0.3C76.6,23.1,76.2,24.9,76.4,26.3z'/%3e%3c/g%3e%3c/svg%3e){kind=small}
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20300%20299.9'%20style='enable-background:new%200%200%20300%20299.9;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%23CC0000;}%20%3c/style%3e%3cpath%20class='st0'%20d='M0.1,150C0.1,67.1,67.2,0,150,0c82.8,0,150,67.1,150,150c0,82.8-67.2,150-150,150C67.2,299.9,0.1,232.8,0.1,150%20z%20M150,249.9c55.2,0,100-44.8,100-100c0-55.2-44.8-100-100-100C94.8,50,50,94.8,50,150C50,205.2,94.8,249.9,150,249.9z%20M200,150%20c0,27.6-22.4,50-50,50s-50-22.4-50-50s22.4-50,50-50S200,122.4,200,150L200,150z'/%3e%3c/svg%3e){kind=small}
What reaches your people
The incidents that start with a person in financial services.
The breach scenarios from the Human Risk Management Framework that start with a person in your sector, and the signals that show them building.
Wire fraud at the closing and in payables
New wiring instructions arrive before a closing. A supplier's new bank details reach accounts payable in the CFO's voice. Each follows a pattern: a lookalike domain, a changed payee, a skipped approval. Verify the request, and coach the people who move money.
A help-desk call, then an account takeover
A caller posing as the help desk asks an adviser to read back a code. Then a sign-in from a city they never visit. Voice Phishing (Vishing) rehearses that call with the people attackers target first; permissions follow risk, with step-up MFA your team approves.
Access that outlives the role
An analyst keeps access after moving teams. A departing adviser downloads the book of business. Notice periods and role changes from your HR system join identity and DLP signals, so a quiet exit shows up, and privileged users get controls that fit their access.
What your examiner asks for
NYDFS, PCI DSS and DORA, requirement by requirement.
NYDFS asks for yearly awareness training for everyone, including social engineering; PCI DSS for training on threats to cardholder data; DORA for compulsory ICT security awareness programs. Our content, simulations and records help you meet each, alongside NIST CSF 2.0, ISO/IEC 27001 and SOC 2.
-
PCI DSS v4.0Payments Req. 12.6, incl. 12.6.3.1 Training contentPhishing simulationReporting and evidence
What it asks for
A formal security awareness program, reviewed every 12 months, with training on threats to cardholder data, including phishing and related attacks and social engineering.
How Living Security helps you meet it
Phishing and social engineering modules, phishing simulation with a teachable moment on every click, and per-person completion and acknowledgment records you can export.
-
NIST CSF 2.0Any sector PR.AT-01, PR.AT-02 Training contentReporting and evidence
What it asks for
Personnel get awareness and training to do their work with cybersecurity risk in mind; people in specialized roles get training for their tasks.
How Living Security helps you meet it
Awareness for everyone, role-based assignments for specialized roles, and reporting that shows who finished and how behavior is moving.
-
ISO/IEC 27001:2022Global Awareness and training Training contentReporting and evidence
What it asks for
Information security awareness, education and training for the people in scope of your ISMS, kept current with your policies.
Content and evidence we provide
Your own policy training built in Content Studio, policy acknowledgments, the topic library, and completion records for your audit file.
-
SOC 2Service organizations Awareness and training Training contentReporting and evidence
What it asks for
Auditors look for evidence that people are trained on, and informed of, their security responsibilities.
How Living Security helps you meet it
Training at hire and every year, policy acknowledgments, and completion reports ready for the audit period.
-
DORAEU financial services Art. 13(6) Training contentTabletop exerciseReporting and evidence
What it asks for
ICT security awareness programs and digital operational resilience training as compulsory modules for all employees and senior management.
Content and evidence we provide
Required modules assigned to every employee and to leadership, VTX tabletops for the people who make the calls, and records for each.
-
NYDFS Part 500New York financial services 23 NYCRR 500.14(a)(3) Training contentPhishing simulationReporting and evidence
What it asks for
Cybersecurity awareness training at least once a year for all personnel, including social engineering, updated for the risks in your risk assessment.
Content and evidence we provide
Social engineering, vishing and smishing content, phishing simulation, and training aimed at the risks your data shows.
No framework matches. Try “PCI”, “HIPAA” or “NIS2”, or ask us in the demo.
How the platform and products fit
Rehearse the lure and the call, train everyone, practice the breach.
Each runs on its own. Inside the platform its results become signals on each person's record, and the playbooks act on them.
Simulate
Living Security Phishing
Email, QR and calendar lures aimed by risk at the people who approve payments, with a teachable moment on every click.
See Living Security PhishingSimulate
Voice Phishing (Vishing)
AI calls that talk back, on a help-desk or vendor pretext, aimed at the approvers a real caller would target, then coach.
See Voice Phishing (Vishing)Train
Security Awareness Training
Social engineering, vishing and SMS phishing modules for everyone, assigned yearly and by risk, with per-person records for the examiner or assessor.
See Security Awareness TrainingTrain
VTX, the Virtual Tabletop Experience
A realistic breach from first alert to press release with the people who make the calls, supporting DORA's digital operational resilience training.
See VTX, the Virtual Tabletop ExperienceLivvy, our AI security analyst, proposes the next action for each person and a person on your team approves it. See the Living Security Platform
Three-quarters
of risky behavior comes from 10% of the workforce. Aim there first.2026 Human Risk Report with the Cyentia Institute
68%
Less time in a risky state after targeted action.2026 Human Risk Report with the Cyentia Institute
25–30%
Drop in the share of risky users in the first six months.2026 Human Risk Report with the Cyentia Institute
Customer proof
Controls you already own,aimed by human risk.
Stewart Title's CISO ties human risk to the identity and data controls he already runs. A Fortune 100 financial services CISO takes the metrics to the board.
“Living Security is already incorporated, it already has all the connections to all of our security tools… [I] start enforcing different policies and different security controls using technology that I already own.”
“Living Security has transformed our approach to human risk. Their platform provides the metrics we need to prove ROI to the board.”
Questions
Human risk in financial services, answered.
Does the training cover the NYDFS annual requirement, PCI DSS 12.6 and DORA?
Our training maps to PCI DSS Requirement 12.6, including 12.6.3.1 on phishing and social engineering. Our content and evidence support the NYDFS Part 500 obligation (23 NYCRR 500.14(a)(3)) for awareness training every year for all personnel, including social engineering, and DORA Article 13(6)'s compulsory ICT security awareness and resilience training for employees and senior management. You get social engineering, vishing and SMS phishing content, phishing simulation and per-person completion records. Your examiner or assessor decides what your program needs; we help you meet it and show the evidence.
How do you help with wire fraud and payment fraud?
Business email compromise and payment fraud (HB-05 in the Human Risk Management Framework) start with a person approving a change. Living Security Phishing and Voice Phishing (Vishing) rehearse the request with the people who move money and coach them the moment they act. The platform reads signals from the email, identity and data tools you already run to show who is targeted most, and a playbook aims the next simulation or module there. Your verification steps stay in place; we make the people behind them harder to fool.
Can risk change what a person can do, for example step-up MFA for a privileged user?
Yes, with your approval. The platform connects to the identity provider, DLP, SIEM and ticketing tools you already run. When a person's risk rises, Livvy proposes a control that fits, such as step-up MFA, a group change or a credential reset, and a person on your team approves it before it runs. Stewart Title's CISO describes connecting the platform to his identity governance and DLP tools in his HRMCon 2026 session, linked above.
What does the examiner see, and what does the board see?
The examiner or auditor gets records: who was assigned which module, when they finished it, which policy version they acknowledged, and their phishing simulation results, exportable per person with dates. The board gets the trend: the share of risky users and time in a risky state month over month, by business unit, with levels in words and the evidence beside them, never a ranking of individuals. Both come from the same data, so the compliance report and the risk report agree.
Where is the data held, and who sees a person's score?
Cloud, with data residency in the US or the EU; security documentation for your review is available on request. You choose what each employee sees: their own score, a behavior score you define, or levels in words only. Managers see their team and executives see cohorts and business units, each with the evidence, and a person's score is never published or ranked. A customer-controlled switch turns every AI feature off at once, and Livvy proposes while a person on your team approves anything that runs.
The training the examiner asks for.The trend the board asks for.
Training that helps you meet the NYDFS, PCI DSS and DORA requirements, evidence on demand, and playbooks aimed at the people wire fraud and account takeover reach first.
