Success story · Banking sector

How Banco del Sol adopted human risk management with a local identity

A financial institution with more than 500 employees needed to leave behind global content that did not connect with its people. In Whalemate they found regional closeness, simulations and training in the language and channels the organization actually uses, and a way to bring cybersecurity into day-to-day work — not an annual course forgotten a week later.

Banking
Sector
+500
Size
LATAM
Region
KnowBe4
Previous solution
THE CHALLENGE

Global content that didn't connect locally

They already had an awareness tool, but global content didn't connect with the cultural reality of their Latin American teams.

The result was low adoption and difficulty making cybersecurity part of everyday work.

Simulaciones avanzadas
WHY THEY CHOSE WHALEMATE

The regional closeness they were missing

They needed a tool with a regional focus, one that matched their teams' culture, not just their language.

Whalemate stood out by adapting simulations and content to local contexts, something global platforms couldn't offer.

Impacto de campaña
HOW THEY USE WHALEMATE TODAY

Newsletters people actually read

They brought Whalemate in to complement their security program, with personalized newsletters as the main channel to keep employees informed and alert.

The careful design and tone adapted to their reality made the reception exceed the security team's expectations.

Newsletters y concientización
RESULTS AND NEXT STEPS

Real engagement with cybersecurity

The most notable change was content adoption: Whalemate's newsletters achieved an engagement level they had never reached with the previous solution.

The next step is to deepen the simulation cadence and leverage the Learning Paths Whalemate builds for each employee based on their risk profile.

Whalemate brought more order and a stronger culture around cybersecurity, taking the risks to information security more seriously.

Banco del Sol
Javier TepedinoCISO, Banco del Sol

Want a program like this for your organization?

We'll show you how Whalemate adapts to your industry, user population and awareness maturity: simulations, adaptive training and human-risk analytics, with a concrete plan for your organization in LATAM.

What you can reuse

Content people recognize, not a global pack

Banco del Sol bet on regional closeness: newsletters with their own identity and cybersecurity brought into the everyday. That approach carries over to another organization.

The reusable lesson is leaving content that does not connect with the roster’s cultural language — not only the linguistic one — and moving to pieces that get read. They focused on newsletters with local design and tone, and on taking cybersecurity into the everyday. Another institution can copy that editorial decision: less global campus, more local habit. It can copy the idea of a channel that gets opened. The engagement they achieved depends on their culture; yours is measured on your own roster.

What does not replicate automatically is the starting point: they had a tool and adoption was failing. Your starting point may be zero or another vendor. The next step they declare — more simulation cadence and paths by profile — is a program that matures, not a guaranteed result. If you operate banking in LATAM, the banking solutions page covers your sector’s rules and vectors.

Questions for anyone who wants to reuse this approach

Does it help if we are not a bank?
The copyable core is localizing content and choosing a channel the roster actually uses. That applies in insurance, in an agency, or in a fintech. The payroll wrapping and BCRA do not. Your industry’s vectors are under solutions. This case brings the argument that “the global pack does not get read.”
Do you publish the newsletter open rate?
No. Banco del Sol tells the improvement as greater acceptance and engagement versus the previous solution. If you need a figure for your committee, in the demo we look at which indicators you can measure in your organization.
Is replacing the previous tool part of the product?
The product is not “a migrator.” The case tells a choice and a use. A migration is planned in implementation: roster, scenarios, communication. There is no “leave your vendor” pack with a published SLA. It is discussed in the demo with IT and People.