1. A computer-implemented method of assessing susceptibility of an electronic device user to a cybersecurity threat, the method comprising: by one or more processors: accessing identifying information relating to a user of an electronic device, selecting a mock attack, causing the mock attack to be deployed to the user so that the user receives the mock attack in the user's regular context of use of the electronic device; receiving, from a sensor, a sensed user action in response to the mock attack, wherein the sensed user action comprises a user interaction with the electronic device; recording the sensed user action; using the sensed user action to determine a susceptibility of the user to a cybersecurity threat; and generating one or more records that include the identifying information relating to the user, the susceptibility of the user to the cybersecurity threat, and the user's action in response to the mock attack.