Method and system for evaluating individual and group cyber threat awareness

A system for evaluating cybersecurity awareness of an organization, comprising:

• an evaluation server comprising a processor and a memory, the memory storing non-transitory machine-readable code to be executed by the processor;
• at least one database storing a plurality of cybersecurity awareness evaluations, the database connected to the evaluation server;
• a plurality of client devices connected to the evaluation server, each of said client devices comprising a processor, a memory and a display;
• said machine-readable code of said evaluation server configured to implement one of said cybersecurity awareness evaluations from said at least one database comprising causing at least one of said plurality of client devices to display a sequence of cyber-security information to said user of said client device which prompt a user action comprising a response comprising a user selection of at least one of a cybersecurity offensive action and a cybersecurity defensive action;
• said machine-readable code configured to cause, when executed, said processor of said evaluation server to generate a plurality of scoring results for said user of the cybersecurity awareness evaluations based upon the user selections, said plurality of scoring results comprising at least one offensive score and at least one defensive score, and generating a total evaluation score comprising a combination of said plurality of scoring results weighted by behavior importance for cybersecurity awareness;
• said machine-readable code configured to cause, when executed, said processor of said evaluation server to generate risk reduction score comprising a normalized representation of at least two generated total evaluation scores over a period of time for each of a plurality of users to generate a risk reduction score for each of said plurality of users;
• said machine-readable code configured to cause, when executed, said processor of said evaluation server to store said risk reduction scores for a plurality of users of said organization and generate, relative to a first group of said organization comprising a first two or more of said plurality of users and relative to a second group of said organization comprising a second two or more of said plurality of users, a first ranking based upon a comparison of said risk reduction scores of said first two or more of said plurality of users to said risk reduction scores of said second two or more of said plurality of users and a second ranking based upon a comparison of said risk reduction scores of said second two or more of said plurality of users to said risk reduction scores of said first two or more of said plurality of users;
• and
• said machine-readable code configured to cause, when executed, said processor of said evaluation server to generate an evaluation dashboard comprising at least one graphical user interface displaying at least one of said first and second rankings.