In an effort to prevent phishing and ransomware attacks from getting to employee inboxes, FINEOS tried (and was frustrated by) many security solutions. Attacks were increasingly sophisticated, with highly targeted BEC attempts impersonating executives. Security awareness training further strained busy personnel, IT resources were stretched chasing false positives reported by users, and still nothing felt foolproof.