Built for NY DFS Section 500.14

Managed Security Awareness Training

Training and phishing simulations are included in every Buffalo Sentinel platform plan. If you'd rather not run the program yourself, we run it for you: assigning training that covers social engineering, launching phishing simulations, following up with employees, and keeping the records your examiner will ask for.

NY DFS Section 500.14

Section 500.14(a)(3) requires cybersecurity awareness training for all personnel:

At least annually, for all personnel
Training that includes social engineering
Updated to reflect risks identified in your risk assessment
Applies to limited-exemption entities too

Training Courses

The platform includes 36 text and scenario-based courses with quizzes. We pick and assign the right ones for your team. Topics covered include:

Security Fundamentals

  • Password security
  • Physical security
  • Clean desk policy
  • Reporting incidents

Phishing & Social Engineering

  • Recognizing phishing emails
  • Vishing attacks
  • Pretexting
  • Safe browsing

Data Protection

  • Data classification
  • Handling sensitive data
  • Encryption basics
  • Secure file sharing

Remote Work Security

  • VPN usage
  • Home network security
  • Public Wi-Fi risks
  • Device security

Compliance Essentials

  • NY DFS overview
  • Your role in compliance
  • Reporting requirements
  • Documentation

Incident Response

  • Recognizing incidents
  • Who to contact
  • What to document
  • Post-incident steps

Phishing Simulations

We plan and launch realistic phishing simulations for you, then review the results and follow up with the employees who need more training.

Realistic Templates

25+ templates, plus your own, that mimic real-world attacks, with credential-harvest landing pages.

Targeted Campaigns

We send campaigns to specific departments or the whole organization, on a scheduled start date.

Detailed Analytics

Opens, clicks, and credential submissions tracked by user and department.

Teachable Moment

Employees who click see an education page on the red flags they missed, and we follow up with extra training.

Campaign Analytics (sample)

Emails Sent248
Opened156 (63%)
Clicked Link42 (17%)
Submitted Credentials8 (3%)
Reported Phishing89 (36%)

Compliance-Ready Reporting

Generate reports that auditors expect for NY DFS examinations.

Training Completion

Track which employees have completed required training modules with dates and scores.

  • Completion rates by department
  • Individual completion records
  • Quiz scores

Phishing Metrics

Results for every phishing simulation, broken down the way auditors ask for them.

  • Campaign summary reports
  • Results by department
  • Click and submission records by user

Audit Documentation

Export-ready documentation for DFS examinations and audits.

  • Annual training summary
  • Policy acknowledgments
  • PDF, CSV, and Excel exports

Run It Yourself, or Let Us Run It

The training and phishing tools come with every platform plan. The managed program is a service fee for our team's time.

Self-Managed

Run training and phishing yourself on the Buffalo Sentinel platform.

Included

in every platform plan, from $500/year

  • 36 text and scenario-based courses with quizzes
  • Phishing simulations with 25+ templates, plus your own
  • Department targeting and scheduled start
  • Training completion and phishing reports
  • Policy acknowledgment tracking
See Platform Pricing
We Run It for You

Managed Program

We run your training and phishing program for you on the Buffalo Sentinel platform.

Custom quote

managed-service fee, on top of your platform plan

  • We choose and assign training for your team
  • We plan and launch phishing simulations
  • Follow-up with employees who click or fall behind
  • Training updated for risks in your risk assessment
  • Annual training summary for your examiner
  • Optional executive briefings
Contact Us

Let Us Run Your Training Program

Request a demo to see the training and phishing tools in action, or call us about a managed program.