Systems And Methods For Subscription Management Of Specific Classification Groups Based On User's Actions

Abstract

Embodiments of the disclosure describe systems and methods for selecting a first group of users, which is selected to receive simulated phishing emails as part of a simulated phishing campaign, and adding users to a second group of users based upon those selected users interacting with a simulated phishing email that is part of a simulated phishing campaign; tracking the completion of remediation training related to phishing emails by users in the second group of users and receiving one or more indications that the users in the second group of users have completed remedial training; and automatically adding users, who are members of the second user group, to the first user group, to a third user group, or to a predetermined user group responsive to the one or more indications that the users in the second group of users have completed remedial training.

Claims

1. A method comprising: (a) receiving, by one or more processors coupled to memory, a first indication of a first user interaction associated with a simulated phishing communication to a user of a first user group of a plurality of user groups; (b) identifying, by the one or more processors, a category from a plurality of categories for the first user interaction, each of the plurality of categories associated with one or more interactions with one or more simulated phishing communications and mapped to at least one of the plurality of user groups; and (c) including, by the one or more processors, the user in a second user group of the plurality of user groups mapped to the category, and (d) communicating, by the one or more processors, a second simulated phishing communication to the user of the second user group.

2. The method of claim 1, wherein the first user interaction comprises a number of times the user interacted with simulated phishing communications.

3. The method of claim 2, wherein (b) further comprises identifying the category based as least on the number of times reaching a threshold.

4. The method of claim 1, wherein (b) further comprises classifying, by the one or more processors, the first user interaction into the category of a plurality of categories,

5. The method of claim 1, wherein (c) further comprises adding, by the one or more processors, the user to the second user group while keeping the user in the first user group.

6. The method of claim 1, wherein (c) further comprises adding, by the one or more processors, the user to the second user group while remover the user from the first user group.

7. A system comprising: one or more processors coupled to memory, and configured to: receive a first indication of a first user interaction associated with a simulated phishing communication to a user of a first user group of a plurality of user groups; identify a category from a plurality of categories for the first user interaction, each of the plurality of categories associated with one or more interactions with one or more simulated phishing communications and mapped to at least one of the plurality of user groups; and include the user in a second user group of the plurality of user groups mapped to the category, and communicate a second simulated phishing communication to the user of the second user group.

8. The system of claim 7, wherein the first user interaction comprises a number of times the user interacted with simulated phishing communications.

9. The system of claim 8, wherein the one or more processors are configured to identify the category based as least on the number of times reaching a threshold.

10. The system of claim 7, wherein the one or more processors are configured to classify the first user interaction into the category of a plurality of categories,

11. The system of claim 7, wherein the one or more processors are configured to add the user to the second user group while keeping the user in the first user group.

12. The system of claim 7, wherein the one or more processors are configured to add the user to the second user group while remover the user from the first user group.

13. A method comprising: (a) communicating, by one or more processors coupled to memory, a first simulated phishing communication to a user of a first user group of a plurality of users groups; (b) detecting, by the one or more processors, an event associated with the first simulated phishing communication to the user; (c) including, by the one or more processors, the user in a second user group of the plurality of user groups based at least on the event, and (d) communicating, by the one or more processors, a second simulated phishing communication to the user of the second user group.

14. The method of claim 13, wherein the event comp

Images