Dynamically providing cybersecurity training based on user-specific threat information

A method, comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• generating and storing electronic user profiles for one or more users of an organization;
• monitoring electronic mail messages for the one or more users to determine user-specific threat information indicating at least one threat encountered by at least one user, wherein the user-specific threat information indicating at least one threat encountered by the at least one user is determined based on email message traffic monitored by exchanging data with an electronic mail server over a computer network, and identified cybersecurity threats present in the email message traffic of the at least one user;
• identifying, by the at least one processor, a plurality of users, including the at least one user, to receive cybersecurity training in a first cybersecurity training topic based on the user-specific threat information indicating the at least one threat that has been encountered by the at least one user, the identifying including:
• monitoring interactions of the at least one user with network links embedded in one or more email messages;
• monitoring interactions of at least one other user with network links embedded in one or more other email messages;
• comparing a number of times the at least one user interacts with the network links in the one or more email messages with a number of times the at least one other user interacts with the network links embedded in the one or more other email messages;
• and
• determining that the number of times the at least one user interacts with network links embedded in the one or more email messages is greater than the number of times the at least one other user interacts with network links embedded in the one or more other email messages;
• selecting one or more pre-generated computer-executable cybersecurity training modules from a database of pre-generated training templates for each of the plurality of users based on identifying the plurality of users to receive the cybersecurity training in the first cybersecurity training topic, each of the one or more pre-generated computer-executable cybersecurity training modules being generated prior to the receipt of the user-specific threat information and being generic to the plurality of users;
• loading, by the at least one processor, the selected one or more pre-generated computer-executable cybersecurity training modules for presentation to the plurality of users;
• dynamically adapting, for each of the identified plurality of users, after the selection of the one or more pre-generated computer-executable cybersecurity training modules and based on a plurality of user-specific threat information including the user-specific threat information, the selected one or more pre-generated computer-executable cybersecurity training modules by omitting portions of the one or more computer-executable cybersecurity training modules, thereby generating a plurality of adapted computer-executable cybersecurity training modules, each of the adapted computer-executable cybersecurity training modules being dynamically adapted for a specific user of the identified plurality of users;
• and
• providing, by the at least one processor, each of the dynamically adapted computer-executable cybersecurity training modules to a user computing device of a corresponding specific user of the identified plurality of users, including causing the user computing device of each corresponding specific user to present a cybersecurity training application graphical user interface corresponding to a respective one of the dynamically adapted computer-executable cybersecurity training modules.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• generate and store electronic user profiles for one or more users of an organization;
• monitor electronic mail messages for the one or more users to determine user-specific threat information indicating at least one threat encountered by at least one user, wherein the user-specific threat information indicating at least one threat encountered by the at least one user is determined based on email message traffic monitored by exchanging data with an electronic mail server over a computer network, and identified cybersecurity threats present in the email message traffic of the at least one user;
• identify a plurality of users to receive cybersecurity training in a first cybersecurity training topic based on the user-specific threat information indicating the at least one threat that has been encountered by the at least one user, the identifying including:
• monitoring interactions of the at least one user with network links embedded in one or more email messages;
• monitoring interactions of at least one other user with network links embedded in one or more other email messages;
• comparing a number of times the at least one user interacts with the network links in the one or more email messages with a number of times the at least one other user interacts with the network links embedded in the one or more other email messages;
• and
• determining that the number of times the at least one user interacts with network links embedded in the one or more email messages is greater than the number of times the at least one other user interacts with network links embedded in the one or more other email messages;
• select one or more pre-generated computer-executable cybersecurity training modules from a database of pre-generated training templates for each of the plurality of users based on identifying the plurality of users to receive the cybersecurity training in the first cybersecurity training topic, each of the one or more pre-generated computer-executable cybersecurity training modules being generated prior to the receipt of the user-specific threat information and being generic to the plurality of users;
• load the selected one or more pre-generated computer-executable cybersecurity training modules for presentation to the plurality of users;
• dynamically adapt, for each of the identified plurality of users after the selection of the one or more pre-generated computer-executable cybersecurity training modules and based on a plurality of user-specific threat information including the user-specific threat information, the selected one or more pre-generated computer-executable cybersecurity training modules by omitting portions of the one or more computer-executable cybersecurity training modules, thereby generating a plurality of adapted computer-executable cybersecurity training modules, each of the adapted computer-executable cybersecurity training modules being dynamically adapted for a specific user of the identified plurality of users;
• and
• provide each of the dynamically adapted computer-executable cybersecurity training modules a computing device of each corresponding specific user of the identified plurality of users, including causing the computing device of each corresponding specific user to present a cybersecurity training application graphical user interface corresponding to a respective one of the dynamically adapted computer-executable cybersecurity training modules.