ISO 27001 Certified badge by A-LIGNWhalemate is ISO/IEC 27001:2022 certified by A-LIGNISO/IEC 27001:2022 · A-LIGNSee Trust Center

Whalemate Advisory: human risk programs for regulated industries

We build an annual program for your industry and country, run it with a dedicated team and deliver the reports your regulator asks for. You do not have to do anything else.

Talk to a specialist
How it works

What a year with Advisory looks like

  1. Discovery and regulations

    We map the regulations of your industry and country, and where your program stands today. That sets what has to be covered and what evidence you will need.

  2. Annual plan

    We build the year’s plan with a Gantt chart, KPIs and reports. You approve it once and it is written down: the service is measured against that plan.

  3. Execution

    We handle the implementation and run the awareness plan: courses, games, simulated attacks and in-person talks.

  4. Measurement and reports

    We track the plan’s KPIs and prepare the reports for your regulator’s audits.

Why it matters

Why an annual program and not one-off services

Because regulators ask for continuity and evidence, not isolated actions. An annual program built for your industry and country covers what the rules require and keeps everything documented for the audit.

Deliverables

What is included

A complete program, not à la carte services.

Regulations and annual planWe map the regulations of your industry and country, and build the year’s plan with a Gantt chart, KPIs and reports.
Dedicated teamA CX lead, an Account Manager and an awareness specialist assigned to your account all year.
Full executionImplementation, awareness plan, courses, games, simulated attacks and in-person talks.
Reports for the regulatorThe year’s evidence organized for your regulator’s audits, with the plan’s KPIs.
Requirements and timelines

What we need from you

  • A point person who approves the annual plan and works with the dedicated team.

  • Your people list or a connection to your directory, to load everyone in the program.

  • Any regulatory requirements you have already mapped. If you have not, we map them during discovery.

The program

How it relies on the platform

The program runs on the Whalemate platform: courses, games and simulated attacks come from there, and the plan’s KPIs are read in analytics. The dedicated team operates it for you.

See the platformCompare with the managed service
Other services

Often contracted alongside this one

Cybersecurity talksSessions for the team, in person or online, adapted to the industry. Lead time: 3 months in person, 2 months online.See the serviceCrisis tabletopThe only service aimed at the committee, not the roster. The CISO puts the board in front of an incident at the table.See the servicePower BI reportingDashboards in your BI stack, not another screen. We join program data to the sources the committee already reads.See the service
Questions

Questions about Whalemate Advisory

How is it different from the managed service?
The managed service adds an analyst who operates your Whalemate plan. Advisory is a complete annual program for regulated industries: regulatory mapping, a dedicated three-person team, in-person talks and reports for the regulator.
Which industries is it for?
Regulated industries such as banking, insurance or energy. The program is built by industry and by country, based on what each regulator requires.
What do I have to do?
Approve the annual plan and give us a point of contact. The dedicated team handles the rest: implementation, running the plan and the reports.
How is it measured?
With the KPIs set in the annual plan. The reports show the year’s progress and are ready for your regulator’s audits.
Is there a published price?
No. It depends on the industry, the country and the number of people. It is quoted as an annual project.

Let’s build your industry’s program

Tell us your industry and country, and we will show you what a year with Advisory looks like.

Talk to a specialist

Full catalog on Services