How the grant works

One security awareness training course for each employee, delivered online through our training partner, BreachSecureNow. TC³ covers the license. Access lasts 12 months from the day we set up your account.

You stay in charge of it. We create a manager account for the person you name, they add your employees, and your team trains on its own schedule. We send a setup guide so your manager isn't left guessing.

Phishing got better. Attackers now use AI to write their emails, so the typos and clumsy grammar people were taught to spot are often gone. The message that looks like it came from your bank, your vendor or your boss can now read exactly like them. Good training teaches people to check the request, not the spelling.

To be specific: the grant does not include phishing simulations, monthly or ongoing training, policy work, or compliance assessments. Many cyber insurers, compliance frameworks and licensing boards require some of those. One annual course won't satisfy them on its own, and we won't tell you it does. Completing the training does not make your organization compliant with any law, framework, insurance policy or licensing requirement.

1. Apply. About five minutes. We ask how many people will train, and whether you have a compliance requirement or carry cyber insurance.
2. Sign the acknowledgment. One checkbox confirming you understand what the grant covers and what it doesn't.
3. A short call, only if you need one. If you have a compliance requirement or cyber insurance, we set up a call of 15 minutes or less to make sure the grant fits. There's no sales pitch. If phishing testing would help you, we'll explain what it adds once, and that's the end of it.
4. We decide, usually within 2 business days. That's counted from your application, or from the call if you needed one.
5. You're set up. We create your manager account and send the setup guide. Your team starts whenever you're ready.

Any organization in the United States, including nonprofits. Each organization can receive up to 50 seats. If more of your people need training, tell us on the application and we'll look at it case by case. Managed service providers and IT resellers aren't eligible.

You never have to buy anything to get the grant or keep it. The only catch is that your team has to actually take the training. We can't do that part for them, though we did consider it.

1. What the grant covers. One annual security awareness training course for each enrolled employee, delivered online through our training partner, BreachSecureNow. TC³ covers the license cost. Access lasts 12 months from the day your manager account is created.
2. What it doesn't cover. Phishing simulations, ongoing or monthly training, policy work, compliance assessments, or any other TC³ service. Completing the training does not make your organization compliant with any law, framework, insurance policy or licensing requirement, and TC³ doesn't claim it does.
3. Who can apply. Any organization in the United States. Managed service providers and IT resellers are not eligible. Each organization can receive up to 50 seats; if you have more employees, tell us on the application and we'll decide case by case.
4. How it works. Apply, and sign the acknowledgment. If you have a compliance requirement or carry cyber insurance, we'll set up a call of 15 minutes or less to confirm the grant fits; there's no sales pitch. TC³ reviews your application and usually decides within 2 business days, counted from your application or from the call if you needed one. Once you're approved, we create a manager account for the person you name. You add your employees and run the training on your own schedule.
5. Your part. Name one manager. Enroll only people who work for your organization. Keep the employee list current.
6. Seats are limited. The program funds 750 employee seats in total. TC³ may stop taking applications once they are allocated.
7. Application window. Opens when this page goes live and runs through August 31, 2027, or until seats are allocated, whichever comes first.
8. No obligation. You never have to buy anything to receive or keep the grant. If phishing testing is relevant to you, we'll explain what it adds once, and that's the end of it.
9. Your information. We use what you submit to review your application and set up your account. BreachSecureNow receives the names and work emails it needs to deliver the training. We may send you occasional TC³ emails, and you can unsubscribe at any time. See our privacy policy.
10. Our decision. TC³ approves or declines each application. TC³ may change or end the program. The grant has no cash value and can't be transferred. None of this promises a future program.