Security awareness training built for your industry
The FTC Safeguards Rule requires every covered business to train its staff on security. Our courses use the scams your people actually see, at the F&I desk or in the middle of filing season, and give you the records to show the training happened.
See what your staff will see
One short narrated clip from each edition, with captions.
Not another generic phishing video
The rule asks for training "updated as necessary to reflect risks identified by the risk assessment." Generic courses can't do that. Ours are built around your industry and your program.
Built for your industry
Dealership staff learn about payoff wire fraud, deal jackets and fake lender portals. Tax-office staff learn about EFIN and e-Services scams, fake "new clients" and the IRS warning signs of data theft.
Matched to your program
Your firm's contacts, portal and reporting steps sit right beside the course in your own training area, and staff acknowledge your written security program when they finish.
Records for your files
Every learner passes a short quiz and signs off on your policies. You get certificates and a completion log, ready for your annual report or an FTC request.
Seven short modules, about 30 minutes, plus a quiz
Six core modules are shared. The seventh, and every scenario, is written for your kind of business.
For car dealerships
Sales, F&I, the office and title clerks, BDC, service and porters.
- Why customer information matters at a dealership
- Phishing and impersonation, including fake GMs and lenders
- Logins and MFA for the DMS, CRM and lender portals
- Deal jackets, credit applications and license copies
- Devices, the showroom floor and remote work
- Spotting and reporting incidents
- Threats to dealerships: payoff and wire fraud, fake vendors, identity fraud and customer data left in vehicles
For tax preparers and CPA firms
Owners, preparers, the front desk and seasonal staff.
- Why client information matters at a tax firm
- Phishing and impersonation during filing season
- Logins and MFA for tax software and e-Services
- Handling client information: portals, clean desks, disposal
- Devices and remote work
- Spotting and reporting incidents
- Threats to tax firms: EFIN and e-Services takeover, remote-access scams and the IRS signs of data theft
Included with our programs, or on its own
Included
Training for all of your staff, refreshed every year and reported in your annual QI report.
About Managed QIFirst year included
For up to 10 learners at tax offices and 50 at dealerships, plus the course for the senior manager who oversees your program.
About Program SetupFrom $99 per year
- Tax Edition, per firm: $99 for up to 5 staff, $199 for up to 15, $349 for up to 30
- Dealer Edition, per location: $149 for up to 10 staff, $349 for up to 25, $599 for up to 50, $999 for up to 100
- Larger teams: quoted
- Course for an in-house QI or program overseer: $149
Set up once, kept current every year
We set it up
Your own training area, with your firm's contacts, portal and reporting steps beside the course.
Staff take it online
On any device, in short modules, with practice exercises and a quiz.
You get the records
Certificates, signed acknowledgments and a completion log.
It stays current
A short yearly refresher written from your latest risk assessment.
Training FAQ
Does this meet the Safeguards Rule training requirement?
The courses are designed to meet the staff training requirement in 16 CFR 314.4(e)(1), and they're built using NIST's guidance on security training programs (SP 800-50 Rev. 1). Whether a business's training is adequate depends on its own risks, which is why each course is set up for your business and refreshed after your risk assessment.
Is it FTC-approved or certified?
No one approves security awareness courses. The FTC doesn't review or certify training, and any course that claims "FTC approval" is overstating it. Ours is built to stand on its own merits and maps every module to the rule.
How long does it take?
About 30 minutes for the full course, in seven modules of 2 to 4 minutes that staff can take separately, plus practice exercises and a quiz. The new-hire and seasonal quick start takes about 15 minutes.
Do you run phishing simulations?
Not ourselves. Many IT providers already do. As your QI, we check that it happens and include the results in your program. That keeps us independent from the people we oversee.
What records do we get?
A certificate for each learner, their quiz score and signed acknowledgment, and a completion log you can keep with your security program.
Do you have other industries?
Dealerships and tax offices are first. If your business is covered by the Safeguards Rule in another way, such as mortgage or finance, ask us.
Want training that fits your business?
Email us with a question or to set up a free 20-minute call, and we'll show you how it would work for your team.