SYSTEM AND METHODS TO INCENTIVIZE ENGAGEMENT IN SECURITY AWARENESS TRAINING
Systems and methods to incentivize engagement in security awareness training are disclosed. The systems and methods include a user enrolling in a simulated self-phishing system that enables the user to receive simulated self-phishing communications and be scored on the user's interactions with the simulated self-phishing communications. The method includes identifying organizational information of the user, and communicating simulated self-phishing communications based at least on the organizational information of the user. The method includes receiving interaction data of the user with the simulated self-phishing communications. The method may generate a score of the user based at least on the interaction data.
1 . A method comprising:
receiving, by a server, a request of a user of an organization to enroll in a simulated self-phishing system that enables the user to receive simulated self-phishing communications and be scored on the user's interactions with the simulated self-phishing communications;
identifying, by the server responsive to the request, organizational information of the user;
communicating, by the server, to one or more devices of the user one or more simulated self-phishing communications generated responsive to the user's enrollment in the simulated self-phishing system and based at least on the organizational information of the user;
receiving, by the server, interaction data of the user with the one or more simulated self-phishing communications; and
generating, by the server for display, a score of the user based at least on the interaction data.
2 . The method of claim 1 , further comprising receiving, by the server responsive to the request to enroll, a selection of the user to be in one of a single user mode or a multi-user mode of the simulated self-phishing system.
3 . The method of claim 2 , wherein the multi-user mode of the simulated self-phishing system is configured to display the score of the user with scores of other users in an enumerated list of scores.
4 . The method of claim 2 , further comprising receiving, by the server responsive to the selection of the user to be in the single user mode of the simulated self-phishing system, one or more parameters to adjust one of content or delivery of the one or more simulated self-phishing communications.
5 . The method of claim 4 , wherein the one or more parameters comprises identification of one or more of the following: a range of time in which to receive the one or more simulated self-phishing communications, a number of how many simulated self-phishing communications to receive, and a time window in which a first simulated self-phishing communication is to be sent.
6 . The method of claim 4 , wherein the one or more parameters comprise identification of one or more of the following: a type of simulated self-phishing communication, a difficulty level of the simulated self-phishing communication and a mode of communication of the simulated self-phishing communication.
7 . The method of claim 2 , further comprising generating, by the server, the one or more simulated self-phishing communications based at least on the selection of the user to be in one of the single user mode or the multi-user mode of the simulated self-phishing system.
8 . The method of claim 1 , further comprising receiving, by the server, personal information of the user comprising one or more of the following: a personal email address, a personal phone number, information of one or more social media accounts, a hometown of the user, a birthdate, a gender, a club, an interest or an affiliation.
9 . The method of claim 7 , further comprising generating, by the server, the one or more simulated self-phishing communications using the personal information of the user.
10 . The method of claim 7 , further comprising adjusting, by the server responsive to receiving the personal information, the score of the user.
11 . The method of claim 1 , further comprising generating, by the server responsive to the interaction data, a test to communicate to the user.
12 . The method of claim 10 , further comprising adjusting, by the server, responsive to receiving results of the test, the score of the user.
13 . A system comprising:
one or more processors, coupled to memory and configured to:
receive a request of a user of an organization to enroll in a simulated self-phishing system that enables the user to receive simulated self-phishing communications;
identify, responsive to the request, organizational information of the user;
communicate to one or more devices of the user one or more simulated self-phishing communications generated responsive to the user's enrollment in the simulated self-phishing system and based at least on the organizational information of the user;
receive interaction data of the user with the one or more simulated self-phishing communications; and
generate for display on a display device a score of the user based at least on the interaction data.
14 . The system of claim 13 , wherein the one or more processors are further configured to receive, responsive to the request to enroll, a selection of the user to be in one of a single user mode or a multi-user mode of the simulated self-phishing system.
15 . The system of claim 14 , wherein the multi-user mode of the simulated self-phishing system is configured to display the score of the user with scores of other users in an enumerated list of scores.
16 . The system of claim 14 , wherein the one or more processors are further configured to receive responsive to the selection of the user to be in the single user mode of the simulated self-phishing system, one or more parameters to adjust one of content or delivery of the one or more simulated self-phishing communications.
17 . The system of claim 16 , wherein the one or more parameters comprises identification of one or more of the following: a range of time for which to receive the one or more simulated self-phishing communications, a number of how many simulated self-phishing communications to receive, and a time window in which a first simulated self-phishing communication is to be sent.
18 . The system of claim 16 , wherein the one or more parameters comprises identification of one or more of the following: a type of simulated self-phishing communication, a difficulty level of the simulated self-phishing communication and a mode of communication of the simulated self-phishing communication.
19 . The system of claim 13 , wherein the one or more processors are further configured to generate the one or more simulated self-phishing communications based at least on the selection of the user to be in one of the single user mode or the multi-user mode of the simulated self-phishing system.
20 . The system of claim 13 , wherein the one or more processors are further configured to receive personal information of the user comprising one or more of the following: a personal email address, a personal phone number, information of one or more social media accounts, a hometown of the user, a birthdate, a gender, a club, an interest or an affiliation.
21 . The system of claim 20 , wherein the one or more processors are further configured to generate the one or more simulated self-phishing communications using the personal information of the user.
22 . The system of claim 20 , wherein the one or more processors are further configured to adjust, responsive to receiving the personal information, the score of the user.
23 . The system of claim 13 , wherein the one or more processors are further configured to generate, responsive to the interaction data, a test to communicate to the user.
24 . The system of claim 23 , wherein the one or more processors are further configured to adjusting, responsive to receiving results of the test, the score of the user.