implementing-anti-phishing-training-program
Guides creating and measuring an anti-phishing training program. It helps protect people from malicious emails and links.
What it does
Helps create and manage a training program to teach people how to identify and avoid phishing emails, which are attempts to steal information. It uses simulations and lessons to make people safer online.
When to use it
- ✓When setting up a new anti-phishing training program.
- ✓To comply with security rules that require training.
- ✓When wanting to improve your company's security against fake emails.
Example of what to ask your AI
“How can I set up security training for my team to identify phishing emails?”
Want more? Open the sections below.
How to use
The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.
Skill link
Ready-to-paste message
How it works
The program works by testing people with fake emails (simulations) and offering short lessons when they make mistakes. It also tracks progress to see if people are learning and becoming safer.
Installation
Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.
In the terminal (Claude Code, Codex, Cursor), in your project folder:
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-anti-phishing-training-programOr download just the file:
curl -L https://raw.githubusercontent.com/mukul975/Anthropic-Cybersecurity-Skills/main/skills/implementing-anti-phishing-training-program/SKILL.md -o SKILL.mdTechnical content (original SKILL.md)
Original text by the author, straight from GitHub.
Implementing Anti-Phishing Training Program
Overview
Security awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positive reinforcement to build a security-conscious culture. This skill covers designing, deploying, and measuring a comprehensive phishing awareness program using platforms like KnowBe4, Proofpoint Security Awareness, and open-source alternatives.
When to Use
- When deploying or configuring implementing anti phishing training program capabilities in your environment
- When establishing security controls aligned to compliance requirements
- When building or improving security architecture for this domain
- When conducting security assessments that require this implementation
Prerequisites
- Management buy-in and budget approval
- Security awareness training platform (KnowBe4, Proofpoint SAT, Cofense)
- Employee email list and organizational structure
- Baseline phishing susceptibility data (from initial simulation)
- Learning management system (LMS) integration capability
Key Concepts
Training Program Pillars
- Baseline Assessment: Initial phishing simulation to measure current susceptibility
- Interactive Training: Role-based modules covering phishing identification
- Regular Simulations: Monthly/quarterly phishing tests with progressive difficulty
- Just-in-Time Learning: Immediate training after a user fails a simulation
- Positive Reinforcement: Recognition for reporting phishing correctly
- Metrics & Reporting: Track improvement over time by department and role
SANS Security Awareness Maturity Model
- Level 1: Non-existent - No program
- Level 2: Compliance-focused - Annual checkbox training
- Level 3: Promoting Awareness - Engaging, regular content
- Level 4: Long-term Sustainment - Continuous program with culture change
- Level 5: Metrics Framework - Risk-based measurement and optimization
Workflow
Step 1: Establish Baseline
- Run initial phishing simulation across all departments
- Measure click rate, submit rate, and report rate
- Identify high-risk departments and roles
Step 2: Design Curriculum
- General awareness: Phishing identification basics for all employees
- Role-specific: Finance (BEC/wire fraud), IT (credential phishing), Executives (whaling)
- Progressive difficulty: Beginner, intermediate, advanced modules
- Micro-learning: Short (3-5 minute) frequent sessions vs. annual marathon
Step 3: Deploy Training Platform
- Configure KnowBe4/Proofpoint SAT with organizational groups
- Set up automated enrollment workflows
- Integrate with LMS for completion tracking
- Configure reporting dashboards
Step 4: Run Continuous Simulations
- Monthly simulations with varied scenarios
- Increase difficulty based on organizational performance
- Include diverse attack types: links, attachments, QR codes, BEC
Step 5: Measure and Optimize
Use scripts/process.py to analyze training completion, simulation results, and program effectiveness over time.
Tools & Resources
- KnowBe4: https://www.knowbe4.com/
- Proofpoint Security Awareness: https://www.proofpoint.com/us/products/security-awareness-training
- Cofense PhishMe: https://cofense.com/
- SANS Security Awareness: https://www.sans.org/security-awareness-training/
- Terranova Security: https://terranovasecurity.com/
Validation
- 90%+ training completion rate across organization
- Measurable reduction in phishing click rate over 6 months
- Increase in user phishing report rate
- Department-level improvement tracking
FAQ
What is phishing?
Phishing is a type of online scam where criminals pretend to be trustworthy companies or people to trick you into revealing personal information, like passwords or bank details, usually through email or messages.
Why do I need a training program?
Even with security systems, people can still be tricked. Training teaches how to recognize suspicious emails, protecting you and the company from attacks that can cause financial and data loss.
What tools can I use?
There are several platforms that help create and manage these training programs, such as KnowBe4, Proofpoint Security Awareness, and Cofense.
Details
Original description by the author
Guides designing, deploying, and measuring an anti-phishing security awareness program - baseline phishing simulations, interactive training modules, just-in-time learning, and metric tracking - using platforms like KnowBe4, Proofpoint Security Awareness, or Cofense. Use when building or maturing a phishing awareness program, establishing training controls for compliance, or measuring phishing sus
Popularity
- GitHub stars
- 35k
- Ranking position
- #5820
- License
- Apache-2.0
- Updated
- 8/31/2026
Comments
- …
More skills from this repository
abusing-dpapi-for-credential-access
Gives your AI agent ready-made instructions for a specific task, so it does it better and faster.
mukul975/Anthropic-Cybersecurity-Skills
abusing-shadow-credentials-for-privesc
Teaches your AI agent to write clear, well-structured text.
mukul975/Anthropic-Cybersecurity-Skills
achieving-cmmc-level-2-compliance
Helps your agent prepare an environment for CMMC Level 2 compliance. It implements security requirements and manages necessary documentation.
mukul975/Anthropic-Cybersecurity-Skills
acquiring-disk-image-with-dd-and-dcfldd
Helps your agent create exact copies of hard drives. This is useful for ensuring no information is lost or altered during investigations.
mukul975/Anthropic-Cybersecurity-Skills
Similar skills
connections-optimizer
Improves your social network connections. It suggests who to follow or unfollow and helps create personalized messages to expand your network.
affaan-m/ECC
content-engine
Creates content for different platforms. It helps produce posts, scripts, and content calendars that work well on networks like X, LinkedIn, and YouTube.
affaan-m/ECC
crosspost
Distributes content across multiple social networks, adapting it for each. It's useful for reaching more people on different platforms.
affaan-m/ECC