Cybersecurity experience earned in the real world.
Michael Levin spent more than 30 years in public service and law enforcement, including decades focused on cybercrime, investigations, and cybersecurity leadership. That experience is the foundation of CFISA.
Experience before education.
Long before cybersecurity awareness became an industry, Michael was working where cybercrime, investigations, technology, and human behavior intersected. Those career chapters continue to shape how CFISA approaches security awareness training today.
Investigating cybercrime in the real world.
Michael spent 22 years with the U.S. Secret Service during a career that included cybercrime investigations, computer forensics, intelligence, and the evolving threat posed by hackers and electronic crime.
Building collaboration against electronic crime.
Michael managed the Secret Service Electronic Crimes Task Force program, bringing law enforcement, private industry, and other organizations together to address increasingly sophisticated electronic crime.
National cybersecurity leadership.
Michael completed his federal government career as Deputy Director of the National Cyber Security Division at the U.S. Department of Homeland Security.
Turning investigative experience into prevention.
After completing his government career, Michael founded the Center for Information Security Awareness in 2007 to help organizations prepare employees for the behaviors and decisions cybercriminals exploit.
Investigations at global scale.
Michael later spent nine years as Senior Investigations Manager for Microsoft Global Security, supporting investigative and security work across North and South America.
Keeping security awareness connected to current threats.
Michael remains directly involved in CFISA training and continues to speak about AI-enabled cybercrime, phishing, social engineering, identity attacks, deepfakes, and the human decisions attackers target.
Institutional names and marks shown above represent Michael Levin’s career history. They do not imply current endorsement of CFISA.
From investigating attacks to helping prevent them.
Cybersecurity ultimately comes down to decisions people make.
After decades working around cybercrime and investigations, Michael had seen what happens when a convincing message, stolen credential, misplaced trust, or simple mistake becomes a security incident.
He founded CFISA to move that experience upstream. The goal was straightforward: help employees recognize the situations attackers exploit before those situations become incidents.
Serious security awareness training does not need unnecessary complexity. People need to understand the risk, recognize the moment that matters, and know what to do next.
What real cybercrime experience changes.
CFISA training is shaped by what attackers actually do, where people become vulnerable, and what employees can realistically do to reduce risk.
Real Attacks
Training begins with how cybercriminals actually operate, not abstract security theory.
Human Decisions
Employees learn to recognize the ordinary moments when clicks, credentials, messages, and trust become security decisions.
Practical Response
Awareness should tell people what to do next, not simply frighten them with threats and statistics.
Current Threats
AI-enabled scams, phishing, business email compromise, identity attacks, QR threats, social engineering, and emerging risks continually shape the curriculum.
Still focused on what comes next.
Michael continues to speak with business, healthcare, technology, and cybersecurity audiences about AI-driven cybercrime, social engineering, employee risk, and the human side of security.
AI, Cybercrime, and the Human Factor
After delivering the opening keynote, Michael joined TribalHub to continue the conversation about AI-powered phishing, social engineering, deepfake fraud, and why attackers continue to focus on people.
Keynotes, conferences, and industry conversations.
AI, Cybercrime, and the Human Factor
AI, Cybercrime, and the Human Factor
Cyber Smarts for Smart Leaders: Protecting People, Data, and Trust
Michael is available for select keynotes, executive sessions, podcasts, panels, webinars, interviews, and media appearances.
Real-world experience. Modern delivery.
The mission has stayed consistent since 2007, while the ways organizations deploy and manage cybersecurity awareness training have continued to evolve.
Current cybersecurity awareness training designed around practical employee understanding, retention, and response.
Training can support enterprise learning environments, including LMS and SCORM-based deployments.
Michael continues to lead engaging onsite and live webinar sessions for organizations that want a direct, interactive experience.
CFISA supports organizations through direct purchasing and modern enterprise procurement options, including AWS Marketplace.
A little more about who’s behind the training.
Help your employees recognize what attackers hope they miss.
Explore practical cybersecurity awareness training built from decades of real-world cybercrime experience.