[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6GY539HSTPFFH5PBYYC79X1":3,"skill-same:01M6GY539HSTPFFH5PBYYC79X1":103},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":47,"commitSha":48,"skillDirectory":49,"forksCount":50,"repositoryHtmlUrl":51,"repositoryHomepageUrl":6,"ownerHtmlUrl":52,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":53,"install":54,"resources":67},"01M6GY539HSTPFFH5PBYYC79X1","implementing-anti-phishing-training-program",null,"Security awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positiv","micsapp\u002Fmicstec-skills","micsapp","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F82411001?v=4","01M6GWCFQ6D3PV8EHNY62NN5VW","01M6GWCFVE1PA5HG0DKC7AMFJ3",4,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37],"implementing anti phishing training program","training program","phishing","training","learning","security awareness training","human","social","culture","modules","interactive","security awareness","email","cybersecurity","security-culture","defense","awareness","social-engineering","email-security","dmarc","2026-11-10 10:12:30",false,"---\nname: implementing-anti-phishing-training-program\ndescription: Security awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positiv\ndomain: cybersecurity\nsubdomain: phishing-defense\ntags: [phishing, email-security, social-engineering, dmarc, awareness, training, security-culture]\nversion: \"1.0\"\nauthor: mahipal\nlicense: Apache-2.0\n---\n# Implementing Anti-Phishing Training Program\n\n## Overview\nSecurity awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positive reinforcement to build a security-conscious culture. This skill covers designing, deploying, and measuring a comprehensive phishing awareness program using platforms like KnowBe4, Proofpoint Security Awareness, and open-source alternatives.\n\n\n## When to Use\n\n- When deploying or configuring implementing anti phishing training program capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n- Management buy-in and budget approval\n- Security awareness training platform (KnowBe4, Proofpoint SAT, Cofense)\n- Employee email list and organizational structure\n- Baseline phishing susceptibility data (from initial simulation)\n- Learning management system (LMS) integration capability\n\n## Key Concepts\n\n### Training Program Pillars\n1. **Baseline Assessment**: Initial phishing simulation to measure current susceptibility\n2. **Interactive Training**: Role-based modules covering phishing identification\n3. **Regular Simulations**: Monthly\u002Fquarterly phishing tests with progressive difficulty\n4. **Just-in-Time Learning**: Immediate training after a user fails a simulation\n5. **Positive Reinforcement**: Recognition for reporting phishing correctly\n6. **Metrics & Reporting**: Track improvement over time by department and role\n\n### SANS Security Awareness Maturity Model\n- **Level 1**: Non-existent - No program\n- **Level 2**: Compliance-focused - Annual checkbox training\n- **Level 3**: Promoting Awareness - Engaging, regular content\n- **Level 4**: Long-term Sustainment - Continuous program with culture change\n- **Level 5**: Metrics Framework - Risk-based measurement and optimization\n\n## Workflow\n\n### Step 1: Establish Baseline\n- Run initial phishing simulation across all departments\n- Measure click rate, submit rate, and report rate\n- Identify high-risk departments and roles\n\n### Step 2: Design Curriculum\n- **General awareness**: Phishing identification basics for all employees\n- **Role-specific**: Finance (BEC\u002Fwire fraud), IT (credential phishing), Executives (whaling)\n- **Progressive difficulty**: Beginner, intermediate, advanced modules\n- **Micro-learning**: Short (3-5 minute) frequent sessions vs. annual marathon\n\n### Step 3: Deploy Training Platform\n- Configure KnowBe4\u002FProofpoint SAT with organizational groups\n- Set up automated enrollment workflows\n- Integrate with LMS for completion tracking\n- Configure reporting dashboards\n\n### Step 4: Run Continuous Simulations\n- Monthly simulations with varied scenarios\n- Increase difficulty based on organizational performance\n- Include diverse attack types: links, attachments, QR codes, BEC\n\n### Step 5: Measure and Optimize\nUse `scripts\u002Fprocess.py` to analyze training completion, simulation results, and program effectiveness over time.\n\n## Tools & Resources\n- **KnowBe4**: https:\u002F\u002Fwww.knowbe4.com\u002F\n- **Proofpoint Security Awareness**: https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fsecurity-awareness-training\n- **Cofense PhishMe**: https:\u002F\u002Fcofense.com\u002F\n- **SANS Security Awareness**: https:\u002F\u002Fwww.sans.org\u002Fsecurity-awareness-training\u002F\n- **Terranova Security**: https:\u002F\u002Fterranovasecurity.com\u002F\n\n## Validation\n- 90%+ training completion rate across organization\n- Measurable reduction in phishing click rate over 6 months\n- Increase in user phishing report rate\n- Department-level improvement tracking\n","# Implementing Anti-Phishing Training Program\n\n## Overview\nSecurity awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positive reinforcement to build a security-conscious culture. This skill covers designing, deploying, and measuring a comprehensive phishing awareness program using platforms like KnowBe4, Proofpoint Security Awareness, and open-source alternatives.\n\n\n## When to Use\n\n- When deploying or configuring implementing anti phishing training program capabilities in your environment\n- When establishing security controls aligned to compliance requirements\n- When building or improving security architecture for this domain\n- When conducting security assessments that require this implementation\n\n## Prerequisites\n- Management buy-in and budget approval\n- Security awareness training platform (KnowBe4, Proofpoint SAT, Cofense)\n- Employee email list and organizational structure\n- Baseline phishing susceptibility data (from initial simulation)\n- Learning management system (LMS) integration capability\n\n## Key Concepts\n\n### Training Program Pillars\n1. **Baseline Assessment**: Initial phishing simulation to measure current susceptibility\n2. **Interactive Training**: Role-based modules covering phishing identification\n3. **Regular Simulations**: Monthly\u002Fquarterly phishing tests with progressive difficulty\n4. **Just-in-Time Learning**: Immediate training after a user fails a simulation\n5. **Positive Reinforcement**: Recognition for reporting phishing correctly\n6. **Metrics & Reporting**: Track improvement over time by department and role\n\n### SANS Security Awareness Maturity Model\n- **Level 1**: Non-existent - No program\n- **Level 2**: Compliance-focused - Annual checkbox training\n- **Level 3**: Promoting Awareness - Engaging, regular content\n- **Level 4**: Long-term Sustainment - Continuous program with culture change\n- **Level 5**: Metrics Framework - Risk-based measurement and optimization\n\n## Workflow\n\n### Step 1: Establish Baseline\n- Run initial phishing simulation across all departments\n- Measure click rate, submit rate, and report rate\n- Identify high-risk departments and roles\n\n### Step 2: Design Curriculum\n- **General awareness**: Phishing identification basics for all employees\n- **Role-specific**: Finance (BEC\u002Fwire fraud), IT (credential phishing), Executives (whaling)\n- **Progressive difficulty**: Beginner, intermediate, advanced modules\n- **Micro-learning**: Short (3-5 minute) frequent sessions vs. annual marathon\n\n### Step 3: Deploy Training Platform\n- Configure KnowBe4\u002FProofpoint SAT with organizational groups\n- Set up automated enrollment workflows\n- Integrate with LMS for completion tracking\n- Configure reporting dashboards\n\n### Step 4: Run Continuous Simulations\n- Monthly simulations with varied scenarios\n- Increase difficulty based on organizational performance\n- Include diverse attack types: links, attachments, QR codes, BEC\n\n### Step 5: Measure and Optimize\nUse `scripts\u002Fprocess.py` to analyze training completion, simulation results, and program effectiveness over time.\n\n## Tools & Resources\n- **KnowBe4**: https:\u002F\u002Fwww.knowbe4.com\u002F\n- **Proofpoint Security Awareness**: https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fsecurity-awareness-training\n- **Cofense PhishMe**: https:\u002F\u002Fcofense.com\u002F\n- **SANS Security Awareness**: https:\u002F\u002Fwww.sans.org\u002Fsecurity-awareness-training\u002F\n- **Terranova Security**: https:\u002F\u002Fterranovasecurity.com\u002F\n\n## Validation\n- 90%+ training completion rate across organization\n- Measurable reduction in phishing click rate over 6 months\n- Increase in user phishing report rate\n- Department-level improvement tracking\n",{"name":5,"tags":43,"author":44,"domain":31,"license":14,"version":45,"subdomain":46,"description":7},[20,36,35,37,34,21,32],"mahipal","1.0","phishing-defense","master","3f5d983eb4ef375b749adcd6b07ec03bd82ae8a8","_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program",0,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills","https:\u002F\u002Fgithub.com\u002Fmicsapp","2026-03-20 11:24:18",{"source":8,"skillName":5,"commands":55,"prompt":65,"zipAvailable":66},[56,59,62],{"tool":57,"command":58},"npx","npx skills add micsapp\u002Fmicstec-skills --skill implementing-anti-phishing-training-program",{"tool":60,"command":61},"bunx","bunx skills add micsapp\u002Fmicstec-skills --skill implementing-anti-phishing-training-program",{"tool":63,"command":64},"pnpm","pnpm dlx skills add micsapp\u002Fmicstec-skills --skill implementing-anti-phishing-training-program","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002FSKILL.md",true,[68,74,79,85,89,93,99],{"path":69,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":72,"sourceHtmlUrl":73},"assets\u002Ftemplate.md","ASSET","资产文件",2472,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002Fassets\u002Ftemplate.md",{"path":75,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002FLICENSE",{"path":80,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":83,"sourceHtmlUrl":84},"references\u002Fapi-reference.md","REFERENCE","参考文档",1845,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002Freferences\u002Fapi-reference.md",{"path":86,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fstandards.md",2114,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002Freferences\u002Fstandards.md",{"path":90,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Fworkflows.md",3158,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002Freferences\u002Fworkflows.md",{"path":94,"resourceType":95,"resourceTypeDesc":96,"sizeBytes":97,"sourceHtmlUrl":98},"scripts\u002Fagent.py","SCRIPT","脚本",6997,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002Fscripts\u002Fagent.py",{"path":100,"resourceType":95,"resourceTypeDesc":96,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Fprocess.py",14270,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002F_universal\u002Fcybersecurity-skills\u002Fskills\u002Fimplementing-anti-phishing-training-program\u002Fscripts\u002Fprocess.py",[104,142,172,193,213,238],{"skillNo":105,"name":106,"nameZh":6,"description":107,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":109,"categories":110,"keywords":121,"publishedAt":38},"01M6HBTJ02FXBFG9NYEHHYAP52","azure-apim-architecture","Analyzes and explains Azure API Management architecture decisions for enterprise API marketplace implementations using VNet Internal mode, Front Door, hybrid authentication, and multi-environment strategies. Use when discussing APIM component selection, network topology, cost optimization, or comparing alternatives like workspaces vs instances, VNet Internal vs External mode, or Front Door vs Application Gateway.","MIT","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fazure-apim-architecture\u002FSKILL.md",[111,116],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":117,"categoryName":118,"taxonomyType":119,"taxonomyTypeDesc":120},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141],"architecture","azure","azure apim architecture","component","authentication","gateway","topology","Optimization","network","api","team","environment","multi-environment","workspaces","instances","selection","strategies","azure api management","mode","for",{"skillNo":143,"name":144,"nameZh":6,"description":145,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":146,"categories":147,"keywords":156,"publishedAt":38},"01M6HBT7J4H082JEEA670B3EQ9","apiops-deployment","Guides deployment of Azure API Management infrastructure using Infrastructure as Code (Bicep\u002FTerraform), CI\u002FCD pipelines (GitHub Actions\u002FAzure DevOps), and APIOps workflows. Use when deploying APIM, creating pipelines, or implementing dev→test→prod promotion strategies.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapiops-deployment\u002FSKILL.md",[148,149,152,155],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},{"categoryNo":150,"categoryName":151,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":153,"categoryName":154,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":117,"categoryName":118,"taxonomyType":119,"taxonomyTypeDesc":120},[157,158,159,160,123,161,162,163,164,165,166,167,131,132,138,168,169,139,170,171],"deployment","apiops deployment","workflows","azure devops","infrastructure","code","infrastructure as code","actions","ci","github actions","github-actions","as","guides","CI\u002FCD","implementing",{"skillNo":173,"name":174,"nameZh":6,"description":175,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":176,"categories":177,"keywords":179,"publishedAt":38},"01M6HBT2HEA23THNE9E00GYQBE","apim-policy-authoring","Creates production-ready Azure API Management policy XML for authentication (OAuth 2.0, JWT validation, subscription keys), rate limiting, CORS configuration, error handling, and API transformations. Use when implementing API security, access control, or request\u002Fresponse processing logic.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapim-policy-authoring\u002FSKILL.md",[178],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},[180,181,182,183,123,126,131,132,184,185,186,187,188,189,190,139,191,192,171,141],"policy","authoring","apim policy authoring","security","access","use","ready","api security","Access Control","error","processing","cors configuration","production-ready",{"skillNo":194,"name":195,"nameZh":6,"description":196,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":197,"categories":198,"keywords":201,"publishedAt":38},"01M6HBSY65SB29J9WE9KYD0K6T","api-security-review","Reviews Azure API Management configurations for security vulnerabilities, OWASP API Security Top 10 compliance, VNet Internal mode validation, Private Link verification, and Azure Security Benchmark alignment. Use when performing security audits, pre-deployment validation, or compliance reviews.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapi-security-review\u002FSKILL.md",[199,200],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},{"categoryNo":117,"categoryName":118,"taxonomyType":119,"taxonomyTypeDesc":120},[202,183,203,131,187,204,123,157,205,206,207,208,132,209,139,210,211,212,140,141],"review","security review","api security review","benchmark","verification","owasp","owasp-api","alignment","azure security","reviews","top",{"skillNo":214,"name":215,"nameZh":6,"description":216,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":217,"categories":218,"keywords":219,"publishedAt":38},"01M6HBSRW4PDFE6K4F8JYPZQ05","jira-cli","Interact with Jira from the command line to create, list, view, edit, and transition issues, manage sprints and epics, and perform common Jira workflows. Use when the user asks about Jira tasks, tickets, issues, sprints, or needs to manage project work items.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fjira-cli\u002FSKILL.md",[],[220,221,222,159,223,224,225,226,131,227,228,229,230,231,232,233,234,235,236,237],"cli","jira","jira cli","init","tasks","create","issues","common","work","command","edit","list","view","project","project work","token","line","sprints",{"skillNo":239,"name":240,"nameZh":6,"description":241,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":242,"categories":243,"keywords":244,"publishedAt":38},"01M6HBSNS3JHMW603G47TWE31H","calculator","Performs arbitrary-precision arithmetic calculations including addition, subtraction, multiplication, division, and exponents. Use when the user asks to calculate, compute, or evaluate math expressions, or when precise decimal arithmetic is needed to avoid floating-point errors.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fcalculator\u002FSKILL.md",[],[240,245,246,247,248,249,250,185,251,252],"npm","js","calculate","node","math","user","compute","errors"]