For manufacturing and industrial
Invoice fraud reaches procurement first.See who, before the payment run.
Living Security reads signals from email, identity and HR tools you already run, shows human and agent risk from the plant floor to accounts payable, and proposes the next step.
Security teams at
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20185.6%2073.2'%20style='enable-background:new%200%200%20185.6%2073.2;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%2300095B;}%20%3c/style%3e%3cg%20id='Ford_Script'%3e%3cpath%20class='st0'%20d='M185.5,22c0.2-0.4,0-0.6-0.5-0.6c-2.4,0-5.5,0-8,0c-0.6,0-0.9,0.1-1.2,0.6c-0.9,1.8-12.1,18.5-14.2,21.8%20c-0.4,0.5-0.8,0.4-0.8-0.1c-0.2-1.9-1.9-4.2-4.5-5.2c-2-0.8-4-1-6-0.7c-3.7,0.5-7,2.4-9.8,4.6c-4.3,3.3-8.1,7.6-12.9,10.7%20c-2.6,1.7-6.3,3.2-8.7,1c-2.2-2-1.9-6.5,1.4-10c0.3-0.4,0.8-0.1,0.7,0.3c-0.3,1.6,0.1,3.1,1.3,4.2c1.5,1.3,3.5,1.5,5.3,0.6%20c2.1-1,3.3-3.1,3.7-5.4c0.6-3.6-2.2-6.7-5.6-6.9c-2.8-0.2-5.5,0.8-8.1,2.9c-1.3,1.1-2,1.9-3.2,3.5c-0.3,0.4-0.7,0.4-0.7-0.1%20c0.1-4.6-1.7-7.1-5.5-7.2c-2.9-0.1-6,1.5-8.5,3.5c-2.7,2.1-5,5-7.5,7.7c-0.3,0.3-0.6,0.3-0.7-0.3c-0.1-3-0.8-5.9-2.2-8%20c-0.5-0.7-1.5-1.1-2.4-0.6c-0.4,0.2-1.8,0.9-2.8,1.7c-0.5,0.4-0.7,1-0.5,1.8c1.3,4.5,1,9.6-0.8,14c-1.7,4-4.9,7.5-8.8,8.8%20c-2.5,0.8-5.2,0.4-6.8-1.8c-2.2-3.1-1.3-8.5,2-12.9c2.9-3.9,7.2-6.4,11.4-8c0.5-0.2,0.6-0.5,0.5-0.9c-0.2-0.7-0.6-1.6-0.7-2.1%20c-0.4-1-1.5-1.2-2.8-1.1c-3.1,0.4-5.9,1.4-8.6,2.9c-7.2,3.8-10.8,11.3-12.4,15.3c-0.8,1.9-1.4,3.1-2.2,4.2c-1.1,1.4-2.6,2.7-5.2,5%20c-0.2,0.2-0.4,0.6-0.2,1c0.3,0.5,1.6,2.5,2,2.6c0.4,0.2,0.9-0.1,1.1-0.2c1.8-1.2,4-3.2,5.1-4.5c0.4-0.4,0.8-0.3,1,0.4%20c1,3.5,3.6,6.4,7.2,7.7c6.6,2.2,13.4-1,18.6-6.6c3.3-3.6,4.5-5.8,5.7-7.4c2.1-2.6,6.3-8.5,11.3-12.3c1.8-1.4,4-2.5,5.1-1.8%20c0.9,0.6,1.2,1.9-0.2,4.4c-5.1,9.3-12.6,20.3-14,22.9c-0.2,0.5,0,0.8,0.4,0.8c2.7,0,5.3,0,7.7,0c0.4,0,0.6-0.2,0.8-0.5%20c3.9-6.1,7.6-12,11.5-18c0.2-0.4,0.4-0.1,0.4,0.1c0.1,1.4,0.4,3.3,1.3,4.6c1.5,2.3,3.6,3.3,6,3.3c1.9,0,2.8-0.3,4.8-1%20c1.6-0.6,3-1.4,4-2.1c0.6-0.4,0.7,0.3,0.7,0.4c-0.9,4.9,0.2,10.6,5,13c5.8,2.8,12.1-1.2,15.8-4.8c0.4-0.3,0.7-0.3,0.8,0.4%20c0.1,1.4,0.7,3,1.8,4.2c3.1,3.1,9.2,1.9,15.5-2.9c4-3.1,8.2-7.4,11.9-12c0.1-0.2,0.2-0.5,0-0.7c-0.6-0.6-1.4-1.3-2-1.8%20c-0.3-0.2-0.6-0.2-0.9,0c-3.9,3.7-7.3,7.9-12.4,11.3c-1.7,1.2-4.4,2.1-5.6,0.5c-0.5-0.6-0.4-1.5,0.1-2.7%20C161.1,59.5,184.3,24.1,185.5,22z%20M154.9,51.7c0.1,0.3,0.4,0.5,0.7,0.7c0.1,0,0.2,0.1,0.1,0.4c-1,2.1-1.9,3.3-3.1,5.2%20c-1.1,1.7-2.4,3-4,4.3c-2.3,1.9-5.6,4-8.3,2.6c-1.2-0.6-1.7-2.3-1.7-3.6c0.1-3.8,1.7-7.7,4.9-11.5c3.8-4.7,8-7.1,10.8-5.8%20c2.9,1.4,1.9,4.7,0.7,7.3C154.8,51.3,154.8,51.5,154.9,51.7z'/%3e%3cpath%20class='st0'%20d='M17.2,71.8C8.6,71.8,1,66.5,0.1,57.2c-0.5-5.1,1-9.7,3.9-13.5c2.6-3.3,6.9-6.1,10.6-6.8%20c1.2-0.2,2.8-0.1,3.5,0.7c1,1.2,0.7,2.5-0.3,3.1c-2.8,1.4-6.2,3.9-7.9,7.2c-1.4,2.7-1.6,6,0.4,9.2c3.5,5.2,13.2,5.4,22.2-3%20c2.2-2,4.2-4,6.2-6.3c4-4.5,5.3-6.2,10.6-13.5c0.1-0.1,0.1-0.2,0.1-0.2c0-0.1-0.1-0.1-0.3-0.1c-3.5,0.1-6.6,1.1-9.6,3.4%20c-0.9,0.6-2.1,0.5-2.6-0.3c-0.6-0.9-0.2-2.1,0.8-2.8c4.8-3.3,10-3.9,15.4-4.8c0,0,0.4,0,0.7-0.4c2.2-2.8,3.9-5.4,6.2-8.2%20c2.4-2.9,5.4-5.5,7.7-7.5c3.2-2.8,5.3-3.7,7.4-4.9c0.6-0.3-0.1-0.6-0.2-0.6C63.1,5.5,50.8,2.6,39,7c-8.1,3-11.7,9.5-10,13.8%20c1.2,3.1,5.2,3.5,9,1.7c3.1-1.5,6-4,8.1-7.2c1.1-1.8,3.6-0.5,2.3,2.6c-3.4,8.1-10,14.5-18,14.8c-6.8,0.2-11.2-4.8-11.2-11%20c0-12.2,13.6-20.2,27.8-21.4c17.2-1.4,33.4,3.1,50.5,5.2c13.1,1.6,25.6,1.6,38.7-1.4c1.5-0.3,2.6,0.6,2.5,2.2%20c-0.1,2.3-1.9,4.4-6.2,6.8c-4.9,2.7-10.1,3.5-15.4,3.6c-13,0.1-25.1-5-37.6-7.7c0,0.5,0.2,1.2-0.3,1.5C72.3,15.7,66,20.9,61.8,28.2%20c-0.1,0.2-0.1,0.3,0.2,0.3c3.6-0.2,6.9-0.3,10.3-0.6c0.6,0,0.6-0.2,0.6-0.6c-0.3-2.5,0.4-5.4,2.6-7.4c2.3-2,5.1-2.3,7-0.8%20c2.1,1.7,1.9,4.7,0.8,6.9c-1.2,2.3-3.1,3.5-5,4.1c0,0-0.4,0.1-0.3,0.4c0.1,0.6,2.6,2,2.9,2.4c0.2,0.4,0.1,0.9-0.3,1.3%20c-0.3,0.3-0.7,0.6-1.2,0.6c-0.4,0-0.7-0.2-1.3-0.5c-1.1-0.6-2.6-1.6-3.6-2.9c-0.3-0.4-0.5-0.4-1.3-0.4c-3.7,0.2-9.4,0.8-13.3,1.2%20c-0.9,0.1-1.1,0.3-1.3,0.6c-6.2,10.2-12.8,21.3-20.1,28.6C30.6,69.6,24.1,71.7,17.2,71.8z%20M76.4,26.3c0.1,0.5,0.3,0.6,0.5,0.6%20c1.2-0.2,2.5-1.2,3.2-2.3c0.7-1,1-2.5,0.3-3.1c-0.6-0.5-1.6-0.4-2.4,0.3C76.6,23.1,76.2,24.9,76.4,26.3z'/%3e%3c/g%3e%3c/svg%3e){kind=small}
%20--%3e%3csvg%20version='1.1'%20id='Layer_1'%20xmlns='http://www.w3.org/2000/svg'%20xmlns:xlink='http://www.w3.org/1999/xlink'%20x='0px'%20y='0px'%20viewBox='0%200%20300%20299.9'%20style='enable-background:new%200%200%20300%20299.9;'%20xml:space='preserve'%3e%3cstyle%20type='text/css'%3e%20.st0{fill:%23CC0000;}%20%3c/style%3e%3cpath%20class='st0'%20d='M0.1,150C0.1,67.1,67.2,0,150,0c82.8,0,150,67.1,150,150c0,82.8-67.2,150-150,150C67.2,299.9,0.1,232.8,0.1,150%20z%20M150,249.9c55.2,0,100-44.8,100-100c0-55.2-44.8-100-100-100C94.8,50,50,94.8,50,150C50,205.2,94.8,249.9,150,249.9z%20M200,150%20c0,27.6-22.4,50-50,50s-50-22.4-50-50s22.4-50,50-50S200,122.4,200,150L200,150z'/%3e%3c/svg%3e){kind=small}
What reaches your people
A supplier's new bank details, a shared kiosk, a login that outlived the project.
The breach scenarios from the Human Risk Management Framework that start with a person in your sector, and the signals that show them building.
New bank details from a supplier
A message in a supplier's name asks accounts payable to change remittance details before the next payment run, or tells a plant manager to approve a parts order. Signals: who in procurement and finance is targeted most, who replies, and what access they hold.
A shift on a shared kiosk
Shift workers read email on a kiosk between runs, some under a shared account, with no laptop and no time for a course. Email and identity signals show which teams and roles are targeted and which report, so coaching reaches the team and its supervisor.
The integrator's login that never expired
An integrator's remote access to a line outlives the project. A supplier's app keeps the permissions a buyer granted it. Signals: who holds third-party and privileged access, including accounts that reach plant systems through your identity provider, and which apps each person granted access to.
What the assessor asks
CMMC and NIS2: the clause, what it asks, what we provide.
Defense suppliers show their CMMC 2.0 Level 2 awareness and training practices. Manufacturers in NIS2 scope train management and staff regularly. Our content maps to CMMC and supports NIS2, alongside NIST CSF 2.0, ISO 27001 and SOC 2. Your assessor decides what your program needs.
-
NIST CSF 2.0Any sector PR.AT-01, PR.AT-02 Training contentReporting and evidence
What it asks for
Personnel get awareness and training to do their work with cybersecurity risk in mind; people in specialized roles get training for their tasks.
How Living Security helps you meet it
Awareness for everyone, role-based assignments for specialized roles, and reporting that shows who finished and how behavior is moving.
-
ISO/IEC 27001:2022Global Awareness and training Training contentReporting and evidence
What it asks for
Information security awareness, education and training for the people in scope of your ISMS, kept current with your policies.
Content and evidence we provide
Your own policy training built in Content Studio, policy acknowledgments, the topic library, and completion records for your audit file.
-
SOC 2Service organizations Awareness and training Training contentReporting and evidence
What it asks for
Auditors look for evidence that people are trained on, and informed of, their security responsibilities.
How Living Security helps you meet it
Training at hire and every year, policy acknowledgments, and completion reports ready for the audit period.
-
CMMC 2.0 Level 2US defense supply chain AT.L2-3.2.1 to 3.2.3 Training contentReporting and evidence
What it asks for
Make managers, administrators and users aware of the risks of their work; train people for their security duties; train people to recognize and report insider threat indicators.
How Living Security helps you meet it
Awareness content for every user, role-based assignments, and insider threat training, including the team experience Critical Mass: Remote.
-
NIS2EU Art. 20(2), Art. 21(2)(g) Training contentTabletop exerciseReporting and evidence
What it asks for
Members of management bodies follow cybersecurity training, and entities offer similar training to employees regularly; basic cyber hygiene and training are required risk-management measures.
Content and evidence we provide
Cyber hygiene content for every employee, and VTX tabletops that put leadership in the room.
No framework matches. Try “PCI”, “HIPAA” or “NIS2”, or ask us in the demo.
How the platform and products fit
Products for the plant floor, the back office and the leadership team.
Each runs on its own. Inside the platform its results become signals on each person's record, and the playbooks act on them.
Train
Security Awareness Training
Short modules for a shift workforce, assigned by role and risk, with insider threat content and completion records for the assessor.
See Security Awareness TrainingSimulate
Living Security Phishing
Supplier-invoice and parts-order lures aimed at procurement, finance and plant managers: a teachable moment on every click, a thank-you for every report.
See Living Security PhishingSimulate
SMS Phishing
Texts that talk back reach shift workers on the phone in their pocket, with link, reply and callback lures, then coaching.
See SMS PhishingTrain
VTX, the Virtual Tabletop Experience
A hosted or self-run tabletop that puts plant leadership, legal and communications in one room to practice the breach before it happens.
See VTX, the Virtual Tabletop ExperienceLivvy, our AI security analyst, proposes the next action for each person and a person on your team approves it. See the Living Security Platform
Three-quarters
of risky behavior comes from 10% of the workforce. Aim there first.2026 Human Risk Report with the Cyentia Institute
68%
Less time in a risky state after targeted action.2026 Human Risk Report with the Cyentia Institute
25–30%
Drop in the share of risky users in the first six months.2026 Human Risk Report with the Cyentia Institute
Heard at HRMCon 2026
Start with the signals you have.Act through the tools you already own.
Stewart Title's CISO on enforcing controls through the security tools he already owns, and Blackbaud on pulling disparate tools together through API connections.
“Living Security is already incorporated, it already has all the connections to all of our security tools… [I] start enforcing different policies and different security controls using technology that I already own.”
“All these disparate pieces… we were able to pull together through API connections.”
Questions
Human risk for manufacturers, answered.
Does the training cover CMMC 2.0 Level 2 awareness and training?
Our content maps to the awareness and training practices in CMMC 2.0 Level 2 (AT.L2-3.2.1 to 3.2.3): awareness content for every user, role-based assignments for people with security duties, and insider threat training, including the team experience Critical Mass: Remote. Completion and acknowledgment records export per person with dates. Your assessor decides what your program needs; we help you meet it and show the evidence.
We are in NIS2 scope in the EU. How does this help?
NIS2 asks members of management bodies to follow cybersecurity training and entities to offer similar training to employees regularly, with basic cyber hygiene as a required measure. Our cyber hygiene content supports that for every employee, and VTX, the Virtual Tabletop Experience, puts leadership in the room to practice the breach. Records show who finished what and when. We support your program; your regulator and your auditors decide what it needs.
Most of our people work shifts on the plant floor with no laptop. How do you reach them?
With short content and the channels they already use. Modules run a few minutes, reminders skip the people who already finished, and any module exports as a SCORM package for the LMS your plants use. SMS Phishing reaches the phone in their pocket and coaches after the text. Where people share an account, the signals still show which teams and roles are targeted, so coaching goes to the team and a notice to its supervisor.
Do you connect to our OT network or plant systems?
No. Living Security reads signals from the IT tools you already run: email security, the identity provider and MFA, web gateway, DLP, endpoint and HR systems. There is no agent to deploy and nothing on the OT network. Where plant systems sit behind your identity provider, the people whose accounts reach them show up there, so that access counts in their risk, and a control change, such as step-up MFA, waits for your approval.
Our procurement team keeps getting invoice fraud attempts. What changes?
You see who in procurement and accounts payable is targeted most and who clicks or replies, so Living Security Phishing and Voice Phishing (Vishing) rehearse the supplier pretext with those people first. Every click gets a teachable moment and every report a thank-you, and real phishing reports count on the scorecard. Livvy proposes the next step for the people who need help most, a person approves it, and the trend shows whether it worked.
Answer the assessor.Then show the risk going down.
Content and evidence for CMMC and NIS2, products that reach a shift workforce, and playbooks aimed at the people driving most of your risk, from the plant floor to accounts payable.
