---
title: Standard Chartered Bank Security Awareness Case Study | TSC
description: See how TSC supported Standard Chartered Bank with a global, role-based security awareness and risk management programme for 82,000 employees.
---

[Skip to content](https://thesecuritycompany.com/standard-chartered-bank-security-awareness-case-study#main-content)

[![TSC Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=95&height=78&name=TSC%20Logo%20large.png)](https://thesecuritycompany.com/?hsLang=en)

- [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform?hsLang=en)
- [Products & Services](https://thesecuritycompany.com/productsandservices?hsLang=en)
- [Success Stories](https://thesecuritycompany.com/success-stories?hsLang=en)
- [Resources](https://thesecuritycompany.com/our-resources?hsLang=en)
- [Blog](https://thesecuritycompany.com/blog?hsLang=en)

[Book a demo](https://thesecuritycompany.com/contact-us?hsLang=en)

![Search icon](https://5018647.fs1.hubspotusercontent-na1.net/hubfs/5018647/Design/Icons/Font%20Awesome/search.svg)

[Book a demo](https://thesecuritycompany.com/contact-us?hsLang=en)

[\< Back](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc?hsLang=en)

STANDARD CHARTERED BANK - CASE STUDY

# Protection through Threat Scenario-led Risk Assessments

 

| Client: | **Standard Chartered Bank** |
| --- | --- |
| Sector: | **Financial** |
| Organisation reach: | **50 geographic locations, with a particularly strong presence in Asia and the Middle East** |
| Audience | **Managers, people in specific roles and an all employee (82,000) eLearning course** |
| Programme type | **Bespoke** |
| Services | **eLearning, webinars and campaign content** |
| Delivery scale | **Three webinars with 300 attendees; two eLearning courses for different audiences; crib sheets and interactive PDFs.** |
| Programme timeframe | **12 months** |

 

---

 

**TSC delivered** an all-employee eLearning course for 82,000 employees located in 50 countries. The course was delivered over a 12-month period. This was supplemented with a manager-specific eLearning course and the delivery of 3 webinars for people in specific roles. The pre-webinar survey and post webinar evaluation demonstrated that confidence and knowledge levels rose dramatically following the webinar. 

![standard-chartered-logo](https://thesecuritycompany.com/hubfs/standard-chartered-logo.png "standard-chartered-logo")

---

 

## Challenge

Standard Chartered Bank needed to introduce a new risk management approach that was more thorough and accounted for the ever-changing threat landscape. The new approach required changes to roles, responsibilities and specific working practices and methodologies.

Standard Chartered Bank required a programme that contained learning for all employees, supplemented with specific role-based training for managers and people in risk management roles. The change team also required a bank of physical and digital resources that would act as reference guides for people in critical roles.

## Insight or assessment

Before the development of the training and associated resources TSC had a series of meetings with key stakeholders to understand the organisational context, the programme objectives and the main challenges. There was also a desktop analysis of the current risk management process and review of the documentation for the new Threat Scenario-led Risk Assessments (TSRA).

## Solution

Based on the findings, TSC designed a bespoke programme combining a 15-minute eLearning module for all employees, a 30-minute eLearning role-specific module, and a series of role-specific webinars. The resource pack also included role-based crib sheets for first line of defence, second line of defence, CISO’s and ISRO’s. There were also interactive PDFs on risk management and governance and threat scenario-based risk assessment processes. The programme was tailored to the organisation’s risks, policies, audiences and brand.

## Approach

Why this approach was different: 

### Relevant

The content across all deliverables was reflective of SCBs employee roles, real-time threats and organisational policies and procedures.

### Measurable

The programme established baseline data in relation to knowledge and confidence of risk management procedures.

### Sustainable

This programme provided point-in-time training, which was supplemented with a suite of resources acting as a permanent reference guide with role-specific requirements.

---

 

## Services provided

 

— Security awareness training

— Bespoke learning content

— Role-based training and reference guides

---

 

## Results

Training was delivered with a 92% completion rate. Webinars reached 300 critical stakeholders across the organisation in 50 global locations. The new threat scenario-led risk assessment was successfully introduced and continues to provide assessment practices which minimise the threat level that the bank faces.

### Outcome summary

The successful delivery of the programme gave the security team clearer evidence of risk reduction and improved employee capability. The outputs of TSRA also produced more meaningful reporting to the senior leadership team.

> “The TSRA methodology helps the Group have an holistic ICS threat management picture. Very valuable.”
> 
> Standard Chartered Bank

[\< Back](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc?hsLang=en)

## Make human risk visible

[Get the checklist](https://thesecuritycompany.com/board-reporting-for-human-cyber-risk-in-financial-services-tsc?hsLang=en)

[![TSC White Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20White%20Logo%20large.webp?width=100&height=82&name=TSC%20White%20Logo%20large.webp "TSC White Logo large")](https://thesecuritycompany.com/?hsLang=en)

**©** The Security Company (International) Limited 2026  
Office One, 1 Coldbath Square, London, EC1R 5HL, UK  
Company registration No: 03703393  
VAT No: 385 8337 51

[linkedin-in icon](https://uk.linkedin.com/company/thesecurityco)

[Home](https://thesecuritycompany.com?hsLang=en)

[Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform?hsLang=en)

**[Products & Services](https://thesecuritycompany.com/productsandservices?hsLang=en)**  
[Contact us](https://thesecuritycompany.com/contact-us?hsLang=en)

[Privacy &](https://thesecuritycompany.com/tsc-policies?hsLang=en)[Cookie Policies](https://thesecuritycompany.com/tsc-policies?hsLang=en)

[Terms & Conditions](https://thesecuritycompany.com/tsc-policies?hsLang=en)

**Resources**

- [eBooks](https://thesecuritycompany.com/our-resources?hsLang=en)
- [Reports & Whitepapers](https://thesecuritycompany.com/our-resources?hsLang=en)
- [Cyber Security Calendar](https://thesecuritycompany.com/blog/security-awareness-calendar?hsLang=en)
- [Webinars](https://thesecuritycompany.com/our-resources?hsLang=en)
- [Blog](https://thesecuritycompany.com/blog?hsLang=en)

Copyright © 2026, The Security Company Ltd

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://thesecuritycompany.com/#organization",
  "@type" : "Organization",
  "description" : "Cyber security awareness training and human risk management for businesses of every size.",
  "logo" : "https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=190&height=156&name=TSC%20Logo%20large.png",
  "name" : "The Security Company",
  "sameAs" : [ "https://www.linkedin.com/company/thesecurityco/", "https://www.youtube.com/@thesecurityco", "https://vimeo.com/user31176192", "https://thecpdregister.com/providers/cpd-group-providers--790118", "https://ico.org.uk/ESDWebPages/Entry/Z4812822", "https://find-and-update.company-information.service.gov.uk/company/03703393", "https://registry.blockmarktech.com/certificates/19d457f5-bf79-4f85-8f6e-dd2db181ff76/", "https://www.gartner.com/reviews/product/the-security-company-security-awareness-training" ],
  "url" : "https://thesecuritycompany.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://thesecuritycompany.com/#website",
  "@type" : "WebSite",
  "name" : "The Security Company",
  "publisher" : {
    "@id" : "https://thesecuritycompany.com/#organization"
  },
  "url" : "https://thesecuritycompany.com/"
}
```