What problem does it solve? Human error drives the majority of breaches, yet annual e-learning rarely changes employee behavior. This Skill helps security teams build a complete behavior security engineering program: AI-era threat training, authorized phishing simulations, role-based curricula, and quantified effectiveness measurement. ## Core Features & Use Cases - Phishing Simulation Design: Plan GoPhish/King Phisher campaigns and authorized AiTM (Evilginx2) full-chain MFA simulations with compliance, ethics, and data-protection guardrails. - AI-Era Threat Training: Cover deepfake voice/video vishing, AI-generated spear phishing, quishing, ClickFix, prompt injection, and multi-channel combined attacks with updated red-flag criteria. - Role-Based Training & Measurement: Deliver tailored curricula for executives, finance, HR, developers, and general staff, then measure results with the Kirkpatrick four-level model, phish-prone rate baselines, and HAIS-Q/SeBIS behavior surveys. - Use Case: A CISO needs to cut the company's 33% phishing click rate. Use this Skill to design a quarterly simulation calendar, role-specific training, instant point-of-error education, and a board-ready report showing click-rate and report-rate trends. ## Quick Start Ask the AI to design a quarterly phishing simulation and role-based security awareness training plan for your organization, including baseline metrics and Kirkpatrick evaluation.
