User responses to cyber security threats

A method, comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• generating a first test communication to simulate a potential cyber threat activity;
• sending, via the communication interface, the first test communication to a user device associated with a target user;
• receiving, via the communication interface and from the user device, a response to the first test communication;
• determining, based on the response, a threat awareness level for the target user from at least three levels, wherein the threat awareness level is indicative of a susceptibility of the target user to the potential cyber threat activity;
• based on the threat awareness level, sending, to the target user, a first alert notification to counter the cyber threat activity;
• sending, to the target user and based on the threat awareness level, a second test communication to the user device associated with the target user;
• in response to the sending the second test communication, when the target user is not following mitigation procedures:
• determining an updated threat awareness level;
• sending, to the target user and based on the updated threat awareness level, a second alert notification to counter the cyber threat activity;
• and
• sending, to the target user and based on the updated threat awareness level, a third test communication to the user device associated with the target user;
• and
• in response to sending the second test communication, when the target user is following mitigation procedures:
• when a time threshold is satisfied, stop sending subsequent alert notifications;
• and
• when the time threshold is not satisfied, sending subsequent test communications to the user device associated with the target user.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• generate a first test communication to simulate a potential cyber threat activity;
• send, via the communication interface, the first test communication to a user device associated with a target user;
• receive, via the communication interface and from the user device, a response to the first test communication;
• determine, based on the response, a threat awareness level for the target user from at least three levels, wherein the threat awareness level is indicative of a susceptibility of the target user to the potential cyber threat activity;
• based on the threat awareness level, send, to the target user, a first alert notification to counter the cyber threat activity;
• send, to the target user and based on the threat awareness level, a second test communication to the user device associated with the target user;
• in response to sending the second test communication, when the target user is not following mitigation procedures:
• determine an updated threat awareness level;
• send, to the target user and based on the updated threat awareness level, a second alert notification to counter the cyber threat activity;
• and
• send, to the target user and based on the updated threat awareness level, a third test communication to the user device associated with the target user;
• and
• in response to sending the second test communication, when the target user is following mitigation procedures:
• when a time threshold is satisfied, stop sending subsequent alert notifications;
• and
• when the time threshold is not satisfied, send subsequent test communications to the user device associated with the target user.