Cyber insurance and WISP documentation
Keep a dated record of staff training and phishing practice you can point to when an insurance questionnaire or your WISP asks how staff are trained.
For professional-service firms
Email fraud training your firm doesn't have to run.
CyberNest Hub runs phishing practice, short staff training, and plain-language reporting for small professional firms. You approve. We handle the rest.
- Built for 10–100 person firms
- Fixed 90-day baseline
- Aggregate, non-punitive reporting
$3.05B in reported business email compromise losses
24,768 business email compromise complaints to the FBI
$275M in reported real estate fraud losses, up from $173M
FBI Internet Crime Complaint Center, 2025. What these numbers mean
Why firms start a 90-day baseline
Wire, ACH & invoice protection
Train partners, paralegals, bookkeepers, and coordinators on the exact payment-redirect, vendor-spoofing, and closing-instruction emails targeting your practice.
Works alongside your existing IT or MSP
Your IT provider handles the network and spam filter. We train your people on what gets through. IT's part is one allowlisting change at setup and a test message.
What your staff learn to catch
Most fraud looks like an ordinary email.
Practice uses messages like this one, built around the requests your firm actually handles. Here is what to notice.
- 1 The domain uses a capital I in place of an l.
- 2 Payment details changed by email.
- 3 Urgency, and a push to skip the phone call.
From: Accounts Receivable
billing@northIine-supply.co1
billing@northIine-supply.co1
Subject: Updated remittance details, Invoice 4471
Hi,
Please note our bank details have changed2. Use the attached instructions for today's payment.
I'm in meetings all day, so email is best.3
How it works
Three steps. One clear starting point.
A 90-day baseline
- Short staff training
- Three approved phishing simulations
- Follow-up for anyone who clicks
- A monthly leadership update
Review the results
A short summary of what the program showed and where to focus next.
Keep it going, if you choose
Ongoing training, recurring phishing practice, targeted reinforcement, and monthly leadership reporting. No long-term commitment.
What leadership sees
A one-page update you can read in five minutes.
Trends across the whole firm, not a list of names. Follow-up still reaches the people who need it, without anyone being singled out.
Preview the interactive sample reportMonth 3 update
Reporting is up and clicks are down since month 1. Next focus: payment-change requests.
Why CyberNest Hub
Built for busy firms. Careful by design.
Built around your calendar
Filing deadlines, closings, and hearings are planned around as blackout dates. Practice runs when your team can learn from it.
Nothing to run
No platform for your team to learn. CyberNest Hub sets up, schedules, follows up, and reports.
Responsible by design
Your firm approves every simulation. Exclusions are honored, distressing themes are never used, and real employee passwords are never collected.
Deandre Wilson
Founder & Principal Consultant
Direct principal oversight
Run by a security practitioner, not a ticket queue.
CyberNest Hub is led by Deandre Wilson, Founder & Principal Consultant. With a background investigating how email fraud and security incidents actually unfold in the real world, Deandre designs and manages each client's program directly, giving small and midsize firms senior-level oversight without enterprise complexity.
Backed by hands-on security operations and cloud architecture expertise (CompTIA CySA+, Security+, AWS Solutions Architect), serving professional-service firms in the Chicago area and remotely across the United States.
Learn more about CyberNest HubLatest from CyberNest Hub
Practical reading and free tools
For accounting and tax firms
WISP training guide and one-page resource
Under the FTC Safeguards Rule, your Written Information Security Plan (WISP) must include security awareness training for staff, and small firms get no exemption from that part.
Read the guideNew on the blog
Payment-Change Requests: A Verification Policy Your Firm Can Adopt in a Day
Many email fraud schemes end with someone updating bank details because a message asked them to. The callback rule, two-person approval, and what to tell vendors, on one page.
Read the postFree resource
Client Wire Safety Notice
A one-page notice brokerages give homebuyers at the first meeting: how wiring instructions will arrive, how to verify them, and what to do if something seems wrong. Fillable, with space for your brokerage name, verified contacts, and buyer acknowledgment.
Open the notice (PDF)See whether CyberNest Hub fits your firm.
Twenty minutes, by phone or video.
What happens on the call
- Map your environment and calendar. We review your email platform (Microsoft 365 or Google Workspace), headcount, and upcoming filing or closing blackout dates.
- Identify compliance and workflow priorities. We align simulations with your firm's wire and billing workflows and any cyber insurance or WISP requirements.
- A written scope and quote. You get a fixed quote for the 90-day baseline based on your headcount. No long-term commitment.