--- title: Board Report Checklist for Human Cyber Risk | Financial Services | TSC description: Download the board reporting checklist for financial services and turn human cyber risk evidence into clearer, decision-ready reporting. --- [Skip to content](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc#main-content) [![TSC Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=95&height=78&name=TSC%20Logo%20large.png)](https://thesecuritycompany.com/?hsLang=en) - [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform?hsLang=en) - [Products & Services](https://thesecuritycompany.com/productsandservices?hsLang=en) - [Success Stories](https://thesecuritycompany.com/success-stories?hsLang=en) - [Resources](https://thesecuritycompany.com/our-resources?hsLang=en) - [Blog](https://thesecuritycompany.com/blog?hsLang=en) [Book a demo](https://thesecuritycompany.com/contact-us?hsLang=en) ![Search icon](https://5018647.fs1.hubspotusercontent-na1.net/hubfs/5018647/Design/Icons/Font%20Awesome/search.svg) [Book a demo](https://thesecuritycompany.com/contact-us?hsLang=en) ![Artboard 1-1](https://thesecuritycompany.com/hs-fs/hubfs/Artboard%201-1.webp?width=1200&height=800&name=Artboard%201-1.webp "Artboard 1-1") # Make human risk visible # Move beyond completion rates and show the board the impact of your cyber security and human risk culture. Use the checklist to identify the metrics, evidence and reporting structure that show where behaviour, culture and risk stand. ![cover\_1-1](https://thesecuritycompany.com/hs-fs/hubfs/cover_1-1.webp?width=962&height=1108&name=cover_1-1.webp "cover_1-1") [![\Get the checklist\](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/27246590/interactive-477395929312.png)](https://thesecuritycompany.com/hs/cta/wi/redirect?encryptedPayload=AVxigLI2jkG%2Bve%2BIs3DuhyHQL%2BxF%2BeByXhMzusQi3E41A%2BQW34yMwnkeR9a9dfc%2BDqDnq9a%2FwIjC6E4mDYfpblgBq8WWUkixjB0sQK6LVcsUNo%2F0LBCdvttBPL%2BMrl3ReIgqxTjtXFV2140kK4v28OrLW8cc938gw0M%2F00P4FMGZFoAINP2qeBBQ4mLUVYYjUy01UTpqVizfaes7wD5JhnNPUZeVZ78bph8A8z4EscoQFyEnNbE%2FO0bTw9NaUg%2B0SzpAV7jePuqwA%2Bg%2BtHFV0rg%3D&webInteractiveContentId=477395929312&portalId=27246590&hsLang=en) No form. Instant access. **Which human-risk metrics to prioritise** **Move beyond completion data** Evidence behavioural change and risk Build clearer, defensible reporting   CHECKLIST PREVIEW ## Take cyber security culture and human risk to the board with evidence that drives support. ### Choose the right metric Identifying the human-risk measures that matter most to your board members, helps your report gain attention beyond training completion and participation rates. ### Make board reporting count Connect human-risk evidence to wider business risk. Use incident reporting and real outcomes to make the impact clear, credible and harder to ignore. ### Incidents and outcomes Use incidents from your sector to demonstrate how gaps in human security awareness can lead to serious operational, financial and reputational consequences. ![checklist\_list\_2](https://thesecuritycompany.com/hs-fs/hubfs/checklist_list_2.webp?width=1214&height=1708&name=checklist_list_2.webp) ### 65% **Financial and Insurance breaches involved the human element.** ### +44% **Phishing breaches in finance cost significantly more than the cross-industry global average.** ### £6m **Average cost of a data breach in UK financial services.** [**Make your cyber security culture and human risk measurable, reportable and actionable.**](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc#sec1) *Source: Verizon, 2026 Data Breach Investigations Report (DBIR) | FCA | Northdoor* [Get the checklist](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc#sec1) ---   ### Selected financial service clients ![Bank-of-England](https://thesecuritycompany.com/hs-fs/hubfs/Bank-of-England.webp?width=500&height=344&name=Bank-of-England.webp) ![Barclays](https://thesecuritycompany.com/hs-fs/hubfs/Barclays.webp?width=500&height=344&name=Barclays.webp) ![HSBC](https://thesecuritycompany.com/hs-fs/hubfs/HSBC.webp?width=500&height=344&name=HSBC.webp) ![AVIVA](https://thesecuritycompany.com/hs-fs/hubfs/AVIVA.webp?width=500&height=344&name=AVIVA.webp) ![Schroders](https://thesecuritycompany.com/hs-fs/hubfs/Schroders.webp?width=500&height=344&name=Schroders.webp) ![UBS Logo](https://thesecuritycompany.com/hs-fs/hubfs/UBS%20Logo.webp?width=500&height=344&name=UBS%20Logo.webp) ![Allianz](https://thesecuritycompany.com/hs-fs/hubfs/Allianz.webp?width=500&height=344&name=Allianz.webp) ![Lloyds-bank-logo](https://thesecuritycompany.com/hs-fs/hubfs/Lloyds-bank-logo.webp?width=500&height=344&name=Lloyds-bank-logo.webp)   FINANCIAL SERVICES CASE STUDY ## Experience ## Protection through threat scenario-led risk assessments Standard Chartered Bank is an international bank with around 82,000 employees. Its services include corporate and investment banking, wealth management, retail banking, financial markets, payments, lending and investment services, supporting businesses, governments, institutions and individual customers. TSC was asked to work collaboratively with the Bank to produce a suite of resources that would support the introduction and launch of threat scenario-led risk assessments. [Read Standard Chartered case study](https://thesecuritycompany.com/standard-chartered-bank-security-awareness-case-study?hsLang=en) ![standard-chartered-logo](https://thesecuritycompany.com/hs-fs/hubfs/standard-chartered-logo.webp?width=580&height=400&name=standard-chartered-logo.webp "standard-chartered-logo") ---     CYBER SECURITY IN GLOBAL FINANCE - ADVICE SHEET ## Support ## Cyber security culture and human risk in financial services Financial institutions face a fast-changing threat landscape, from Open Banking and third-party APIs to ransomware, AI-enabled attacks and DDoS. In a highly connected environment, one compromised employee, supplier or system can have consequences far beyond the initial breach. This advice sheet explores the key cyber risks facing financial services and the human behaviours that can increase or reduce exposure, with practical guidance to help strengthen resilience. [View financial advice sheet](https://thesecuritycompany.com/hubfs/TSC_Global_Financial_Services_Advice_Sheet_26.pdf?hsLang=en) ![global finance advice sheet cover with buildings in london](https://thesecuritycompany.com/hs-fs/hubfs/gloabl-finance-advice-sheet.webp?width=2000&height=2000&name=gloabl-finance-advice-sheet.webp "global finance advice sheet cover with buildings in london") ---   ✖   TSC EXPERT PERSPECTIVE ## Culture ## The key cyber security asset you already have **Cyber security culture is shaped by what people do when no one is watching.** Measuring behaviours such as phishing reporting, near-miss disclosure, voluntary training engagement and simulation click rates can turn culture into a measurable part of your security strategy. By tracking these behaviours over time, organisations can identify where resilience is strengthening, where risk remains and where targeted action is needed. Watch Jason McQueen discuss security culture - 2 minutes *Jason McQueen A freelance security and training management consultant with over 35 years’ experience, Jason is a serving Senior Officer in the Royal Naval Reserve. He has advised and trained military and government officials across the globe, specialising in strategic communication and countering hybrid warfare. Jason brings rare, real-world insight into how state and non-state actors exploit psychology, influence, misinformation, and behavioural vulnerabilities.* ## Make human risk visible [Get the checklist](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc#sec1) [![TSC White Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20White%20Logo%20large.webp?width=100&height=82&name=TSC%20White%20Logo%20large.webp "TSC White Logo large")](https://thesecuritycompany.com/?hsLang=en) **©** The Security Company (International) Limited 2026 Office One, 1 Coldbath Square, London, EC1R 5HL, UK Company registration No: 03703393 VAT No: 385 8337 51 [linkedin-in icon](https://uk.linkedin.com/company/thesecurityco) [Home](https://thesecuritycompany.com?hsLang=en) [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform?hsLang=en) **[Products & Services](https://thesecuritycompany.com/productsandservices?hsLang=en)** [Contact us](https://thesecuritycompany.com/contact-us?hsLang=en) [Privacy &](https://thesecuritycompany.com/tsc-policies?hsLang=en)[Cookie Policies](https://thesecuritycompany.com/tsc-policies?hsLang=en) [Terms & Conditions](https://thesecuritycompany.com/tsc-policies?hsLang=en) **Resources** - [eBooks](https://thesecuritycompany.com/our-resources?hsLang=en) - [Reports & Whitepapers](https://thesecuritycompany.com/our-resources?hsLang=en) - [Cyber Security Calendar](https://thesecuritycompany.com/blog/security-awareness-calendar?hsLang=en) - [Webinars](https://thesecuritycompany.com/our-resources?hsLang=en) - [Blog](https://thesecuritycompany.com/blog?hsLang=en) Copyright © 2026, The Security Company Ltd ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#organization", "@type" : "Organization", "description" : "Cyber security awareness training and human risk management for businesses of every size.", "logo" : "https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=190&height=156&name=TSC%20Logo%20large.png", "name" : "The Security Company", "sameAs" : [ "https://www.linkedin.com/company/thesecurityco/", "https://www.youtube.com/@thesecurityco", "https://vimeo.com/user31176192", "https://thecpdregister.com/providers/cpd-group-providers--790118", "https://ico.org.uk/ESDWebPages/Entry/Z4812822", "https://find-and-update.company-information.service.gov.uk/company/03703393", "https://registry.blockmarktech.com/certificates/19d457f5-bf79-4f85-8f6e-dd2db181ff76/", "https://www.gartner.com/reviews/product/the-security-company-security-awareness-training" ], "url" : "https://thesecuritycompany.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#website", "@type" : "WebSite", "name" : "The Security Company", "publisher" : { "@id" : "https://thesecuritycompany.com/#organization" }, "url" : "https://thesecuritycompany.com/" } ```