About

Imported from mukul975/anthropic-cybersecurity-skills (skills/implementing-anti-phishing-training-program/SKILL.md). Install upstream with npx skills add mukul975/anthropic-cybersecurity-skills --skill implementing-anti-phishing-training-program. Copyright stays with the author (Apache-2.0).

Implementing Anti-Phishing Training Program

Name: implementing-anti-phishing-training-program
Author: mukul975

Overview

Security awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positive reinforcement to build a security-conscious culture. This skill covers designing, deploying, and measuring a comprehensive phishing awareness program using platforms like KnowBe4, Proofpoint Security Awareness, and open-source alternatives.

When to Use

When deploying or configuring implementing anti phishing training program capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Management buy-in and budget approval
Security awareness training platform (KnowBe4, Proofpoint SAT, Cofense)
Employee email list and organizational structure
Baseline phishing susceptibility data (from initial simulation)
Learning management system (LMS) integration capability

Key Concepts

Training Program Pillars

Baseline Assessment: Initial phishing simulation to measure current susceptibility
Interactive Training: Role-based modules covering phishing identification
Regular Simulations: Monthly/quarterly phishing tests with progressive difficulty
Just-in-Time Learning: Immediate training after a user fails a simulation
Positive Reinforcement: Recognition for reporting phishing correctly
Metrics & Reporting: Track improvement over time by department and role

SANS Security Awareness Maturity Model

Level 1: Non-existent - No program
Level 2: Compliance-focused - Annual checkbox training
Level 3: Promoting Awareness - Engaging, regular content
Level 4: Long-term Sustainment - Continuous program with culture change
Level 5: Metrics Framework - Risk-based measurement and optimization

Workflow

Step 1: Establish Baseline

Run initial phishing simulation across all departments
Measure click rate, submit rate, and report rate
Identify high-risk departments and roles

Step 2: Design Curriculum

General awareness: Phishing identification basics for all employees
Role-specific: Finance (BEC/wire fraud), IT (credential phishing), Executives (whaling)
Progressive difficulty: Beginner, intermediate, advanced modules
Micro-learning: Short (3-5 minute) frequent sessions vs. annual marathon

Step 3: Deploy Training Platform

Configure KnowBe4/Proofpoint SAT with organizational groups
Set up automated enrollment workflows
Integrate with LMS for completion tracking
Configure reporting dashboards

Step 4: Run Continuous Simulations

Monthly simulations with varied scenarios
Increase difficulty based on organizational performance
Include diverse attack types: links, attachments, QR codes, BEC

Step 5: Measure and Optimize

Use scripts/process.py to analyze training completion, simulation results, and program effectiveness over time.

Tools & Resources

KnowBe4: https://www.knowbe4.com/
Proofpoint Security Awareness: https://www.proofpoint.com/us/products/security-awareness-training
Cofense PhishMe: https://cofense.com/
SANS Security Awareness: https://www.sans.org/security-awareness-training/
Terranova Security: https://terranovasecurity.com/

Validation

90%+ training completion rate across organization
Measurable reduction in phishing click rate over 6 months
Increase in user phishing report rate
Department-level improvement tracking

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/mukul975-anthropic-cybersecurity-skills-implementing-ant-f94e61/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

mukul975-anthropic-cybersecurity-skills-implementing-ant-f94e61.ocm.jsonjson

{
  "ocm": "1",
  "id": "mukul975-anthropic-cybersecurity-skills-implementing-ant-f94e61",
  "kind": "skill",
  "name": "implementing-anti-phishing-training-program",
  "description": "Guides designing, deploying, and measuring an anti-phishing security awareness program - baseline phishing simulations, interactive training modules, just-in-time learning, and metric tracking - using platforms like KnowBe4, Proofpoint Security Awareness, or Cofense. Use when building or maturing a phishing awareness program, establishing training controls for compliance, or measuring phishing susceptibility and reporting rates over time.",
  "publisher": "mukul975",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "legal"
    ],
    "tags": [
      "skill-md",
      "phishing",
      "email-security",
      "social-engineering",
      "dmarc",
      "awareness",
      "training",
      "security-culture",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Guides designing, deploying, and measuring an anti-phishing security awareness program - baseline phishing simulations, interactive training modules, just-in-time learning, and metric tracking - using platforms like KnowBe4, Proofpoint Security Awareness, or Cofense. Use when building or maturing a phishing awareness program, establishing training controls for compliance, or measuring phishing susceptibility and reporting rates over time."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/mukul975/anthropic-cybersecurity-skills",
      "path": "skills/implementing-anti-phishing-training-program/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/mukul975/anthropic-cybersecurity-skills/blob/HEAD/skills/implementing-anti-phishing-training-program/SKILL.md",
      "key": "mukul975/anthropic-cybersecurity-skills/skills/implementing-anti-phishing-training-program/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Implementing Anti-Phishing Training Program\n\n## Overview\nSecurity awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positive reinforcement to build a security-conscious culture. This skill covers designing, deploying, and measuring a comprehensive phishing awareness program using platforms like KnowBe4, Proofpoint Security Awareness, and open-source alternatives.\n\n\n## When to Use\n\n- When deploying or configuring implementing anti phishing training program capa",
  "cost": {
    "context_tokens": 931
  }
}

Fetch it by URL: GET /api/v1/registry/mukul975-anthropic-cybersecurity-skills-implementing-ant-f94e61/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.