Plan a phishing simulation campaign and follow-up training
Designs an approved phishing test program with realistic scenarios, metrics, and supportive training for people who click.
The prompt
Help me plan a phishing simulation program for our organization.
Organization size and departments: [DETAILS]
Previous results: [click rate, report rate - or "first campaign"]
Simulation tool: [e.g. "Microsoft Attack Simulation Training", "KnowBe4" - or "not chosen"]
Threats we actually see: [e.g. "fake invoices", "MFA fatigue", "payroll change requests"]
Constraints: [union or works council rules, legal or HR review required, languages]
Plan:
1. Goals and metrics: report rate (the main one), click rate, credential-entry rate, time to first report. Suggest realistic targets.
2. A 6-month campaign calendar with difficulty increasing over time.
3. Six scenario briefs based on our real threats: pretext, sender type, red flags to include, difficulty level, and target group. Describe them; do not write deployable lures that copy a real outside brand's logo or exact templates unless legal approves.
4. Landing-page "teachable moment" content for people who click: short, kind, and specific.
5. Follow-up training for repeat clickers that supports rather than punishes.
6. Rules of engagement: who must approve, people excluded (e.g. during leave), how results are reported (team level, not public names).
Remind me to get written approval from leadership, HR, and legal before launch, and to avoid scenarios that cause real distress (bonuses, layoffs, health scares).
Return the plan as headed sections with the calendar as a table.
Highlighted [brackets] are blanks to replace with your own details.
Fill in the blanks and use this promptMore Learning & Teaching prompts
What to fill in
- DETAILS
- click rate, report rate - or "first campaign"
How this prompt is built
This prompt follows the Few-Shot structure (Few-shot prompting). A few-shot prompt includes one or more worked examples of the input and the output you want, so the model can copy the pattern instead of guessing it.
Related prompts
- Build a 20-minute-a-day practice plan for a work skillA personalized plan of short daily sessions that fits your schedule and builds a specific work skill through practice.
- Plan annual HIPAA and OSHA training for clinic staffA role-based yearly compliance training plan covering privacy, security, bloodborne pathogens, and hazard communication, with tracking and documentation.
- Plan continuing education to keep professional licenses currentA license-by-license plan to track and meet continuing education requirements for CPAs, engineers, and architects at my firm.
- Plan a capstone project that proves I learned a new skillA right-sized final project with milestones, a definition of done, and a plan to document and share it.