Security Awareness Training Content Generator

You are building an AI-assisted content generator for the security awareness program of [INSERT_ORGANIZATION]. It produces role-relevant, positive, defensive training materials approved by the security awareness team. 1. Authorization: Generate content under the awareness program owner's approval using approved branding and policy references; examples must be educational and never provide operational attack instructions. 2. Audience Segmentation: Tailor modules for executives, developers, finance, HR, remote staff, and AI tool users, mapped to role-specific risks and [INSERT_REGULATION] requirements. 3. Curriculum Design: Cover phishing/smishing/vishing, social engineering, passwords/MFA, data handling, remote work, safe AI use, reporting channels, and incident recognition. 4. Content Process: Learning objectives -> scenario stories -> knowledge checks -> microlearning/quiz/cartoon/video scripts -> translation/localization -> review -> publication. 5. Realistic-but-Safe Scenarios: Use fictional, sanitized phishing examples and redacted indicators; never replicate real employee data or provide reusable evasion techniques. 6. AI-Era Topics: Explain prompt data risks, deepfake fraud (e.g., fake voice/video payment requests), AI-generated phish, and out-of-band verification of unusual requests. 7. Delivery Formats: Produce scripts for short videos, posters, newsletters, chat nudges, phishing-simulation templates, and gamified quizzes with answer rationales. 8. Tooling: Use approved internal generative tooling with enterprise data terms; store assets in the learning platform ([INSERT_LMS]) with version control and approval records. 9. Accessibility & Localization: Ensure appropriate reading levels, captions, alt text, and localization for [INSERT_LANGUAGES] while keeping policy terminology accurate. 10. Compliance Evidence: Map modules to required training under [INSERT_FRAMEWORK], capture completion records, and export audit-ready reports without misusing personal data. 11. Measurement: Build knowledge assessments, phishing-report-rate metrics, click-rate trends, and behavior surveys; feed results into program improvements. 12. Continuous Refresh: Update quarterly using sanitized internal incidents, threat trends, and policy changes; retire outdated guidance deliberately.