Request Demo
CASE STUDY

How Right-Hand’s Human Risk Management Platform Drove Behavior Change and Reduced Employee Generated Security Alerts for a Financial Institution

Our client is a leading financial services organization specializing in debt servicing and loan management.  With hundreds of employees across the U.S., they help financial institutions and government agencies manage complex portfolios, including mortgages, auto loans, and credit card debt.

INDUSTRY  Financial Services (Debt Servicing and Loan Management)
FOUNDED 2002
HEADQUARTERS United States
OPERATIONAL REACH Serves clients across the U.S.

Challenges

Just like any organization in financial services, the customer is a valuable target for attackers and holds a tremendous responsibility when it comes to personal data. Therefore, the challenges they faced include:

  • Increased Volume of Phishing Attacks: Frequent malicious emails and a surge in Business Email Compromise (BEC) attacks exacerbated security concerns.


  • Training Fatigue: Getting employees to complete security awareness training was a constant struggle due to employees focusing on managing their core day jobs.
  • Sensitive Data Exposure: Due to the nature of their business, employees were exposed to critical data to do their job effectively, producing risk of sensitive data sharing, thus exposing the company to compliance and security risks. 
    

  • Operational Strain on the SOC: The customer had a high volume of employee-initiated alerts related to mishandling sensitive data and phishing attempts. This created a substantial workload for the Security Operations Center (SOC) team.

    The combination of these challenges revealed the need for a solution that could not only improve awareness but also change and measure behavior improvements across the workforce.

Solution

Right-Hand presented this customer with its Human Risk Management (HRM) platform, enabling simultaneous deployment of phishing simulations, security awareness training, and integration with their existing security tools to deliver real-time user nudges when they generate a security alert. 

After integrating with their existing email security and SIEM solutions, real-time nudges were triggered to employees when alerts were generated, such as data exposure alerts.  These alerts were aggregated into Right-Hand’s platform, and triggered timely, context-specific nudges to employees delivered via MS Teams and email.

Their phishing simulations and security awareness training were aligned to their industry, region and real-world threats the organization faced, making their security awareness program relevant and personalized to their business.

Closing the Knowledge and Behavior Gaps
The HRM platform provided targeted training on securely handling sensitive data, customized to employees’ roles, behaviors and business contexts. 

Nudges offered actionable tips and steps to correct behaviors immediately, with seamless integration into their existing email security provider.

End-to-End Phishing Solutions
Right-Hand further deployed a comprehensive phishing solution, including simulations, 1-click reporting tools to streamline incident management, and bulk quarantine tools, allowing admins to efficiently investigate and remove threats across inboxes. 

This automated, integrated approach improved response time and reduced risks.

Impact

The implementation of Right-Hand’s Human Risk Management (HRM) platform significantly improved the organization’s security posture and employee engagement, addressing their key challenges with measurable outcomes.

The customer had hit a plateau in their security awareness training, wih one of the best-known security awareness training vendors. By using Right-Hand to upgrade their program, they achieved:

  • Reduced Sensitive Data Exposure Alerts:
Within 60 days, sensitive data exposure incidents decreased by an impressive 17%, effectively transforming employee behavior and reducing risk.


  • Improved Visibility into Risk Behaviors:
Right-Hand’s HRM platform provided the organization with insightful data on employee behavior, enabling targeted interventions and more informed decision-making.
  • Increased Training Completion Rates:
Before Right-Hand, employees were reluctant to complete awareness training. However, since launching the HRM platform, completion rates have consistently reached 96% across various campaigns. The behavior-based training assignments, tailored to real incidents within the organization, played a pivotal role in maintaining high engagement.


  • More User-Reported Emails:
With the introduction of 1-click reporting tools, the company saw a 19% increase in reported phishing emails—both simulated and real—demonstrating employees’ improved vigilance. 


  • Reduced Phishing Click Rates:
After deploying Right-Hand’s phishing simulations and training tools, the company saw a substantial decrease in phishing click rates dropping below 4%, much stronger than industry averages.

About Right-Hand’s Human Risk Management (HRM) Platform

Right-Hand’s HRM platform integrates with existing security tools to identify employee risks and deliver real-time training nudges. This approach reduces alerts, changes behavior, and strengthens security culture.

About Right-Hand’s End-to-End Phishing Solution

Right-Hand’s phishing solution combines simulations, real-time reporting, and automated remediation. Employees learn to identify threats, report suspicious emails instantly via PhishArm, and security teams use our Email Quarantine Automation (EQA) to isolate and remove malicious messages swiftly. 

About Right-Hand Cybersecurity

Right-Hand Cybersecurity pioneers the Human Risk Management (HRM) space, helping organizations make humans more defensible against cyber threats. Our platform integrates with existing security tools to deliver real-time training, behavior nudges, and actionable insights, empowering organizations to reduce risks, enhance employee awareness, and proactively prevent incidents.

Find out how to upgrade your Security Awareness program with Human Risk Management

Request demo