Data processing system for risk-based cybersecurity training

Abstract

A data processing system for risk-based cybersecurity training, comprising a risk assessment unit for determining a dynamic risk score for at least one user or user group based on technical usage parameters, behavioral interaction parameters, previous training results, and organizational security parameters; a training control unit for selecting and providing at least one training module depending on the dynamic risk score; an adaptation unit for changing at least one difficulty parameter during the execution of the training module depending on detected user behavior; a support unit for issuing context-related assistance in response to at least one error pattern, uncertainty pattern, or threshold exceedance; and an evaluation unit for generating structured evaluation data from the course and outcome of the training.