LocalStudent Inc. is seeking to enhance its cybersecurity posture by assessing employee susceptibility to phishing attacks and developing a comprehensive security awareness training program. The project involves conducting targeted phishing campaigns via email, SMS, WhatsApp, and phone to identify vulnerabilities. Following the phishing assessment, the team will identify and prioritize the organization's most critical assets and threats, comparing them against industry standards. The ultimate goal is to create a detailed roadmap for a security awareness training program that addresses identified vulnerabilities and ensures compliance with industry standards. This project will provide learners with practical experience in cybersecurity assessment and training program development.

Key tasks include:

- Conducting phishing campaigns to gauge employee susceptibility.

- Identifying and prioritizing critical assets and threats.

- Assessing current security practices against industry standards.

- Developing a security awareness training roadmap.

The deliverables for this project include:

- A comprehensive report detailing the results of the phishing campaigns, including employee susceptibility rates and identified vulnerabilities.

- A prioritized list of the organization's most critical assets and threats, with an assessment against industry standards.

- A detailed roadmap for a security awareness training program, including steps, timelines, and required resources to address identified gaps and achieve compliance with industry standards.

The Primary project manager will have an introductory meeting with the learners to run them through what we are looking for and the scope of the project, and weekly one on one meetings with afterwards to endure the project is on track. They will review the final report and provide suggestions on improvements before they submit their final draft.