Performance benchmarking for simulated phishing attacks

A system comprising:

• a processor;
• a storage device connected to the processor;
• a network device;
• and
• a set of instructions on the storage device that, when executed by the processor, cause the processor to:
• conduct a first simulated phishing attack on individuals from a first group;
• electronically record in a computer readable storage medium responses of one or more individuals from the first group to the first simulated phishing attack;
• conduct a second simulated phishing attack on individuals from a second group;
• electronically record in the computer readable storage medium responses of one or more individuals from the second group to the second simulated phishing attack;
• calculate an aggregate performance of the first group based on the responses to the first simulated phishing attack;
• calculate an aggregate performance of the second group based on the responses to the second simulated phishing attack;
• compare the aggregate performance of the first group with the aggregate performance of individuals from the second group;
• and
• generate a representation of the comparison of the aggregate performances for display,
• wherein the simulated phishing attacks are standardized with respect to at least one individual from the first group and at least one individual from the second group so as to allow the aggregate performance of the first group to be compared with the aggregate per of the second group.

A non-transitory machine-readable storage medium comprising software instructions that, when executed by a processor, cause the processor to:

• conduct a first simulated phishing attack on individuals from a first group;
• electronically record in a computer readable storage medium responses of one or more individuals from the first group to the first simulated phishing attack;
• conduct a second simulated phishing attack on individuals from a second group;
• electronically record in the computer readable storage medium responses of one or more individuals from the second group to the second simulated phishing attack;
• calculate an aggregate performance of the first group based on the responses to the first simulated phishing attack;
• calculate an aggregate performance of the second group based on the responses to the second simulated phishing attack;
• compare the aggregate performance of the first group with the aggregate performance of individuals from the second group;
• and
• generate a representation of the comparison of the aggregate performances for display,
• wherein the simulated phishing attacks are standardized with respect to at least one individual from the first group and at least one individual from the second group so as to allow the aggregate performance of the first group to be compared with the aggregate performance of the second group.