A short supplement for businesses covered by the New York Department of Financial Services cybersecurity regulation.
Online and self-paced, in English and Spanish
Real-world scenarios with quizzes and a certificate on completion
Simple and classic learning style with text and auto audio narrationAI
$11.95 per course credit, no subscription
Banks, insurers and other businesses authorized under the New York Banking, Insurance or Financial Services Law.
New York 23 NYCRR 500.14(a)(3) requires cybersecurity awareness training, including social engineering, for all personnel at least annually. The limited exemption for small entities does not remove this requirement. Section 500.17 sets notice deadlines (72 hours, and 24 hours for extortion payments) and an April 15 annual certification.
Awareness training for all personnel at least every year
Include social engineering
Know the notice deadlines and keep records for five years
This is a supplement. Take it together with the core Cybersecurity Awareness course. Cybersecurity Awareness Training (the core course)
The course is made of short lessons with real-world scenarios and quizzes. Here is what each module covers.
Module 1
Module 2
Real-world scenarios: The Executive on the Phone; The New Messaging App
Training is one part of a program. These are the parts only your organization can supply.
Questions from learners. PixelPupil does not provide trainers. Your organization names its own trainer or HR contact in PixelPupil, and learners use Ask the Trainer inside the course. The answer comes by email, and answers are expected within two business days.
One credit unlocks this course for one person. Assign it to any employee from your dashboard, any time.
Available in English and Spanish
No subscription, no renewal: buy only what you need
Certificate issued on completion
Banks, insurers and other businesses authorized under the New York Banking, Insurance or Financial Services Law.
The course has about 11 min of narrated lessons, plus scenario quizzes and module assessments. It is self-paced and keeps your place if you stop and come back.
Yes. Every PixelPupil course is available in English and in Spanish, with Spanish narration (the Spanish title is Complemento de Ciberseguridad: DFS de Nueva York 23 NYCRR Parte 500).
No course can do that on its own. This is general training based on the rules described on this page. It is not approved or endorsed by any government agency, and the certificate is a record that the person completed the course. Your organization still provides its own policies, procedures and records, and you should check the rules that apply to you with your own advisor.
$11.95 per course credit. One credit gives one person access to one course, and you can assign it to anyone from your dashboard. There is no subscription.
PixelPupil does not provide trainers. Your organization names its own trainer or HR contact in PixelPupil, and learners use Ask the Trainer inside the course. Answers come by email, and are expected within two business days.
This is a supplement. Take it together with the core Cybersecurity Awareness course.
General training information, not legal advice. PixelPupil courses are not approved or endorsed by any government agency and do not by themselves make an organization compliant. The certificate is a record of completion. Rules change, so check the rules that apply to your organization with your own advisor.
Page updated October 2026.
← Cybersecurity & Data Privacy