Meet the requirement.Then lower the risk.

• PCI DSS v4.0Payments Req. 12.6, incl. 12.6.3.1 Training contentPhishing simulationReporting and evidence

  What it asks for

  A formal security awareness program, reviewed every 12 months, with training on threats to cardholder data, including phishing and related attacks and social engineering.

  How Living Security helps you meet it

  Phishing and social engineering modules, phishing simulation with a teachable moment on every click, and per-person completion and acknowledgment records you can export.

• HIPAA Security RuleUS healthcare 45 CFR 164.308(a)(5) Training contentPhishing simulationReporting and evidence

  What it asks for

  A security awareness and training program for the whole workforce, including management: security reminders, malware protection, log-in monitoring and password management.

  How Living Security helps you meet it

  Healthcare: Cyber Checkup, aligned to HIPAA, plus passwords and MFA and ransomware modules, reminders and nudges, and completion records by department.

  Healthcare: Cyber Checkup

• NIST SP 800-53 Rev. 5US federal AT-2, AT-2(3), AT-3 Training contentPhishing simulationReporting and evidence

  What it asks for

  Literacy training and awareness for every user, including social engineering and mining, and role-based training for people with security duties.

  How Living Security helps you meet it

  The full topic library for every user, social engineering simulations, and training assigned by role and by risk through playbooks.

• NIST CSF 2.0Any sector PR.AT-01, PR.AT-02 Training contentReporting and evidence

  What it asks for

  Personnel get awareness and training to do their work with cybersecurity risk in mind; people in specialized roles get training for their tasks.

  How Living Security helps you meet it

  Awareness for everyone, role-based assignments for specialized roles, and reporting that shows who finished and how behavior is moving.

• ISO/IEC 27001:2022Global Awareness and training Training contentReporting and evidence

  What it asks for

  Information security awareness, education and training for the people in scope of your ISMS, kept current with your policies.

  Content and evidence we provide

  Your own policy training built in Content Studio, policy acknowledgments, the topic library, and completion records for your audit file.

• SOC 2Service organizations Awareness and training Training contentReporting and evidence

  What it asks for

  Auditors look for evidence that people are trained on, and informed of, their security responsibilities.

  How Living Security helps you meet it

  Training at hire and every year, policy acknowledgments, and completion reports ready for the audit period.

• CMMC 2.0 Level 2US defense supply chain AT.L2-3.2.1 to 3.2.3 Training contentReporting and evidence

  What it asks for

  Make managers, administrators and users aware of the risks of their work; train people for their security duties; train people to recognize and report insider threat indicators.

  How Living Security helps you meet it

  Awareness content for every user, role-based assignments, and insider threat training, including the team experience Critical Mass: Remote.

• FedRAMPUS federal cloud NIST SP 800-53 AT family Training contentPhishing simulationReporting and evidence

  What it asks for

  The FedRAMP baselines carry the NIST SP 800-53 awareness and training controls: AT-2, AT-2(3) social engineering and AT-3 role-based training.

  How Living Security helps you meet it

  The same content, simulations and records that cover AT-2 and AT-3, in one report.

• GDPREU Art. 39(1)(b), Art. 32(4) Training contentReporting and evidence

  What it asks for

  The data protection officer monitors awareness-raising and training of staff who process personal data; people with access process it only on instructions.

  Content and evidence we provide

  GDPR training, PII training and data privacy modules, with completion records the DPO can show.

  GDPR trainingPII training

• NIS2EU Art. 20(2), Art. 21(2)(g) Training contentTabletop exerciseReporting and evidence

  What it asks for

  Members of management bodies follow cybersecurity training, and entities offer similar training to employees regularly; basic cyber hygiene and training are required risk-management measures.

  Content and evidence we provide

  Cyber hygiene content for every employee, and VTX tabletops that put leadership in the room.

• DORAEU financial services Art. 13(6) Training contentTabletop exerciseReporting and evidence

  What it asks for

  ICT security awareness programs and digital operational resilience training as compulsory modules for all employees and senior management.

  Content and evidence we provide

  Required modules assigned to every employee and to leadership, VTX tabletops for the people who make the calls, and records for each.

• NYDFS Part 500New York financial services 23 NYCRR 500.14(a)(3) Training contentPhishing simulationReporting and evidence

  What it asks for

  Cybersecurity awareness training at least once a year for all personnel, including social engineering, updated for the risks in your risk assessment.

  Content and evidence we provide

  Social engineering, vishing and smishing content, phishing simulation, and training aimed at the risks your data shows.

No framework matches. Try “PCI”, “HIPAA” or “NIS2”, or ask us in the demo.