Every FFIEC examination. Every wire fraud scenario. Every FinCEN advisory. In a live 60–120 minute session with an expert who knows financial services — not a generic IT trainer.
A fintech startup has a different security problem than a community bank. The bank operates under FFIEC examination, GLBA Safeguards Rule, state banking department oversight, and FinCEN SAR reporting requirements. The threats it faces — wire fraud, ACH redirect, ACH batch spoofing, customer account takeover, vendor-managed network access — are structurally different from the threats that dominate other verticals.
Generic cybersecurity training doesn't address any of this. SecurEveryone's financial services program is built on the FFIEC IT Handbook, NCUA Examiner guidance, and FinCEN advisories — and uses real incidents (ICBC, Evolve, Flagstar, First American Title) as the core case studies.
Walk treasury and operations staff through the exact attack sequence that led to $2.9B in annual wire fraud losses. Covers spoofed executive email, ACH redirect during transaction processing, callback verification failures, and the FinCEN SAR decision tree if a wire goes wrong. Uses real incident patterns from BEC prosecutions.
Walk leadership through a real ransomware incident scenario — from initial detection through FBI IC3 notification, FinCEN SAR filing, board communication, and recovery. Based on the ICBC incident and FinCEN's 2024 ransomware advisory for financial institutions. Addresses the specific decision points that community bank and credit union leadership actually faces during an active incident.
Train branch and member services staff to recognize the phishing and vishing attacks that target financial services customers — and the social engineering that targets the staff themselves. Covers credential-harvesting emails impersonating core banking vendors (Fiserv, Finxact, Jack Henry), text-based vishing, and impersonation of internal IT support. Includes live demonstration of real financial services phishing templates.
Yes. SecurEveryone provides a signed training completion certificate that most state banking associations, credit union leagues, and compliance organizations accept for continuing education credit. Check with your regulator — but our sessions are routinely approved for CRCM, CAMS, and AIB credits. We also provide a written training record suitable for FFIEC examination documentation.
Absolutely. The Business tier ($900 flat for unlimited users) allows you to run multiple sessions across different role groups — treasury and ops, member services, IT, and executives — all under one flat rate. We tailor the scenarios to each audience. Wire fraud recognition training for the teller line looks different from ransomware tabletop for the CISO.
Every SecurEveryone session includes a written completion record with: session date, attendees (de-identified count), curriculum covered, threat scenarios addressed, and a signed attestation from the instructor. This documentation satisfies the FFIEC IT Handbook's requirement for documented security awareness training. We can also provide a formal Risk Assessment summary aligned to the FFIEC CAT that your examiner will recognize.
Yes. We train a significant number of fintech companies, payment processors, embedded finance providers, and B2B financial services companies that fall outside traditional bank regulation. Our training covers the same threat patterns — wire fraud, account takeover, vendor risk — regardless of charter status. Fintechs that handle consumer funds or work with banking-as-a-service partners face the same BEC and phishing risks as community banks.
Credit unions and community banks face virtually identical threat landscapes, but the compliance framework differs. Credit unions navigate NCUA regulations; community banks navigate OCC, FDIC, and state regulator frameworks. Our training maps to both. We also address the specific risks that credit unions face — member-facing vishing and phishing, shared branching vulnerability, and CUSO third-party risk — alongside the wire fraud and ransomware threats that affect all depository institutions.
FinCEN's 2024 ransomware advisory requires financial institutions to identify, report, and mitigate ransomware exposure, including maintaining BSA/AML compliance during ransomware events. FinCEN has flagged that ransomware payments can trigger SAR filing obligations. Our ransomware tabletop training specifically walks leadership through the FinCEN advisory requirements — including the ransomware payment decision tree, who to contact, and how to document the incident in a way that satisfies both the FBI IC3 report and the SAR filing obligation.
FFIEC guidance calls for annual security awareness training at minimum. But in 2024, with wire fraud losses exceeding $2.9B annually (FBI IC3), annual training is insufficient for high-risk roles like treasury, wire operations, and member services. We recommend quarterly refreshers for wire-transfer-authorized staff, semi-annual for general staff, and tabletop exercises annually for the incident response team. Our Business tier at $900 flat makes quarterly training feasible even for smaller institutions.
Free Download
5 attack patterns, DMARC enforcement guide, out-of-band verification protocol, and 3 tabletop scenarios. Built for financial institutions handling wire transfers and ACH payments.
Free Download
6 scenarios including ransomware, BEC wire fraud, and vendor compromise. Scoring rubric. After-action template. NYDFS Part 500 and FFIEC CAT compliance documentation.
Free Download
50-question vendor security questionnaire, risk-tiering matrix (Tier 1/2/3), scoring rubric (0–100), and regulatory crosswalk for GLBA §314.4(f), SOC 2 CC9.2, and NYDFS Part 500.11. Built for financial institutions managing third-party risk.
Book a session directly below. Every session is live, expert-led, and built for your specific institution type — community bank, credit union, or fintech.