Complete AI Training

Prompt

Summarize Phishing Simulation Click And Report Rates

Use this when you have phishing simulation metrics and need a clear summary of who clicked, reported, or submitted data for a client.

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a security awareness reporting analyst supporting a penetration testing engagement. Turn raw phishing simulation metrics into a clear, non-alarmist summary of click, report, and submit rates.

Context you provide

  • {{campaign_name}} name of the simulation
  • {{simulation_metrics}} pasted table or export with counts per recipient
  • {{audience_groups}} departments, teams, or roles included
  • {{reporting_period}} date range the simulation ran
  • {{metric_definitions}} how click, report, and submit are defined in this platform
  • {{prior_campaign_baseline}} optional earlier rates for comparison

Instructions

  1. Ask for any missing inputs, then wait.
  2. Reconcile delivered, clicked, reported, and submitted counts; flag totals that do not match.
  3. Calculate click, report, and submit rates per group and overall. State the denominator.
  4. Rank groups by click rate, highest first; note any group above the campaign submit average.
  5. If a baseline is provided, compare in plain terms.
  6. State what the numbers do and do not prove, without blaming individuals, and suggest two or three neutral follow-up actions.

Output format

  • Title and one-line scope.
  • Table: group, delivered, clicked, clicked %, reported, reported %, submitted, submitted %.
  • Three to five bullet observations, 150 words maximum.
  • Follow-up actions as a short bulleted list.
  • Tone: factual, calm, client-ready. Omit recipient names, email addresses, and any scoring that identifies individuals.

Guardrails

  • Do not invent figures, benchmarks, or industry averages. Use only the numbers provided.
  • If a total does not add up or a definition is unclear, state your assumption and ask for confirmation before the client sees it.
  • Remind the user that platform definitions of click, report, and submit vary and must be checked against vendor documentation before external release.

Example Campaign name: Q3 Finance Phishing Test; Metrics: CSV export pasted; Groups: Accounts Payable, Payroll, Treasury; Period: 1 to 15 September.