A decade ago, cybersecurity was thought of as an IT problem—something to be taken care of by antivirus software and not really a concern of day-to-day workers. However, as the Internet became pervasive, cyber threats became more sophisticated and ubiquitous. Now, it's crucial that every employee is concerned with their online habits, and training is the key to ensuring everyone is on the same page regarding the new threat landscape. However, training is resource-intensive, and not every organization can spare the time or money to adequately protect their workforces from cyber attacks. Compounding the problem is the frequency at which employees need to be trained. Cybersecurity training needs to happen more than once or twice a year to be effective. Automated, gamified solutions are seeing a lot of success in this space. They are inexpensive, don’t take much time on the employees' end, and have powerful mechanics built in to drive lessons home.
Cyberprotect (https://iatraining.disa.mil/eta/cyber-protect/launchpage.htm) was a breakthrough in security training, but it quickly went out of date. I used it as the centerpiece of instructor-led training in 2003-5. then it began to show its age.