Systems and methods for cyberthreat-risk education and awareness

1. A method comprising:

determining a baseline cyberthreat-risk score for a user;

displaying the baseline cyberthreat-risk score via a user interface;

presenting at least one cyberthreat-education activity via the user interface, the at least one cyberthreat-education activity comprising a simulated cyberthreat, wherein the simulated cyberthreat comprises a simulated phishing attack involving a simulated phone call;

receiving, via the user interface, at least one user input associated with the presented at least one cyberthreat-education activity, the at least one user input comprising a response to the simulated cyberthreat;

generating an updated cyberthreat-risk score at least in part by updating the baseline cyberthreat-risk score based at least in part on the user input;

displaying the updated cyberthreat-risk score via the user interface; and

selecting an authentication protocol for the user based at least in part on the updated cyberthreat-risk score of the user.

2. The method of claim 1 , wherein determining the baseline cyberthreat-risk score for the user comprises:

receiving one or more cyberthreat-survey answers from the user; and

determining the baseline cyberthreat-risk score for the user based at least in part on the one or more cyberthreat-survey answers.

3. The method of claim 1 , wherein determining the baseline cyberthreat-risk score for the user comprises determining the baseline cyberthreat-risk score for the user based at least in part on one or more applications installed on a device of the user.

4. The method of claim 1 , wherein determining the baseline cyberthreat-risk score for the user comprises:

searching a plurality of web sites to identify sites containing information associated with the user; and

determining the baseline cyberthreat-risk score for the user based at least in part on results of the searching.

5. The method of claim 1 , wherein determining the baseline cyberthreat-risk score for the user comprises determining the baseline cyberthreat-risk score for the user based at least in part on a browsing history on a device of the user.

6. The method of claim 1 , wherein determining the baseline cyberthreat-risk score for the user comprises determining the baseline cyberthreat-risk score for the user based at least in part on a degree of password reuse among a plurality of online accounts of the user.

7. The method of claim 1 , wherein the user interface is provided via a web portal.

8. The method of claim 1 , wherein the user interface is provided via a mobile app.

9. The method of claim 1 , wherein:

the at least one cyberthreat-education activity comprises a cyberthreat-education video; and

the at least one user input comprises an indication that the user has watched the cyberthreat-education video.

10. The method of claim 1 , wherein:

the at least one cyberthreat-education activity comprises a cyberthreat-education quiz; and

the at least one user input comprises at least one response to the cyberthreat-education quiz.

11. The method of claim 1 , wherein the simulated cyberthreat comprises a simulated email message.

12. The method of claim 1 , wherein the simulated cyberthreat is presented unprompted via the user interface.

13. The method of claim 1 , further comprising:

sending an email message to an email account of the user, wherein the updated cyberthreat-risk score is further based on a user action taken in connection with the email message.

14. The method of claim 1 , further comprising selecting a transaction-security protocol for at least one monetary range of transactions based at least in part on the updated cyberthreat-risk score of the user.

15. The method of claim 1 , further comprising conveying a reward to the user based at least in part on the updated cyberthreat-risk score of the user.

16. A system comprising:

at least one processor; and

one or more non-transitory computer readable storage media containing instructions executable by the at least one processor for causing the at least one processor to perform operations comprising:

determining a baseline cyberthreat-risk score for a user;

displaying the baseline cyberthreat-risk score via a user interface;

presenting at least one cyberthreat-education activity via the user interface, the at least one cyberthreat-education activity comprising a simulated cyberthreat, wherein the simulated cyberthreat comprises a simulated phishing attack involving a simulated phone call;

receiving, via the user interface, at least one user input associated with the presented at least one cyberthreat-education activity, the at least one user input comprising a response to the simulated cyberthreat;

generating an updated cyberthreat-risk score at least in part by updating the baseline cyberthreat-risk score based at least in part on the user input;

displaying the updated cyberthreat-risk score via the user interface; and

selecting an authentication protocol for the user based at least in part on the updated cyberthreat-risk score of the user.

17. One or more non-transitory computer readable storage media containing instructions executable by at least one processor for causing the at least one processor to perform operations comprising:

determining a baseline cyberthreat-risk score for a user;

displaying the baseline cyberthreat-risk score via a user interface;

presenting at least one cyberthreat-education activity via the user interface, the at least one cyberthreat-education activity comprising a simulated cyberthreat, wherein the simulated cyberthreat comprises a simulated phishing attack involving a simulated phone call;

receiving, via the user interface, at least one user input associated with the presented at least one cyberthreat-education activity, the at least one user input comprising a response to the simulated cyberthreat;

generating an updated cyberthreat-risk score at least in part by updating the baseline cyberthreat-risk score based at least in part on the user input;

displaying the updated cyberthreat-risk score via the user interface; and

selecting an authentication protocol for the user based at least in part on the updated cyberthreat-risk score of the user.