Systems and methods for creating and commissioning a security awareness program

A system for configuring and executing simulated phishing campaigns, the system comprising

• a device comprising one or more processors, coupled to memory and comprising:
• a query module configured to receive attributes of an implementation of a security awareness program for an entity via a questionnaire presented via a display;
• a tool executable on the one or more processors and configured to compare the attributes for the entity of an organization to attributes of other entities of other organizations, responsive to receiving the attributes, and
• determine, based at least on the comparison, a configuration for each of a baseline simulated phishing campaign to be executed to communicate electronic simulated phishing communications to users of the entity to get users to click on a link in the electronic simulated phishing communications, electronic based training for users of the entity for security awareness and one or more simulated phishing campaigns to be executed to communicate electronic simulated phishing communications to the users of the entity subsequent to the baseline simulated phishing campaign;
• and
• a server configured to:
• execute the baseline simulated phishing campaign to communicate electronic simulated phishing communications to devices of users, receive indications of users clicking on the link of the electronic phishing communications and identify from the received indications a percentage of users of the entity who are phish-prone, wherein the percentage of users of the entity who are phish-prone comprises a number of users of the entity that clicked on the link of the electronic simulated phishing communications;
• execute the electronic based training to those users identified as phish-prone from the baseline simulated phishing campaign;
• and
• execute the one or more simulated phishing campaigns subsequent to the baseline simulated phishing campaign and based at least on results of the baseline simulated phishing campaign and the electronic based training;
• and
• wherein the server is configured to automatically determine a schedule of each of the baseline simulated phishing campaigns, the electronic based training and the one or more simulated phishing campaigns subsequent to the baseline simulated phishing campaign;
• and
• wherein the one or more simulated phishing campaigns communicate electronic simulated phishing communications to devices of users, receive indications of users clicking on the link of the electronic phishing communications and identify from the received indications the percentage of users of the entity who are phish-prone, and
• automatically generate in an electronic calendar according to the schedule, one or more graphical representations of each of the baseline simulated phishing campaigns, the electronic based training and the one or more simulated phishing campaigns subsequent to the baseline simulated phishing campaign, wherein the server is further configured to update, in a display of the one or more graphical representations in the electronic calendar, a status of execution of a corresponding campaign as the corresponding campaign progresses with users clicking on the link of the electronic phishing communications and, responsive to selecting the one or more graphical representations, display in a user interface a percentage of users who are phish-prone of the corresponding campaign in comparison with a percentage of phish-prone users of the other entities.