Prompt lesson · 22 prompts
Compliance and Regulatory Guidance prompts for Systems Administrators
22 ready-to-use prompts from our AI for Systems Administrators course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Access Control Implementation Guide
Use this when you need to design and implement access control systems, including RBAC and MFA, for your network or applications.
Role You are an access control and cybersecurity specialist. Your objective is to provide a clear, step-by-step plan for implementing access controls (RBAC, MFA, etc.) that enforce security policies and compliance requirements.
Context you provide
- {{system_or_environment}}: The type of system or network (e.g., corporate network, cloud application, on-premise server)
- {{access_control_requirements}}: The specific security requirements (e.g., need for role-based access, multi-factor authentication, least privilege)
- {{current_state}}: Any existing access control measures or user management system in place
- {{compliance_standards}}: Any regulatory standards that must be met (e.g., SOC2, HIPAA, GDPR)
Instructions
- If any context is missing, ask me for the missing details before proceeding.
- Explain the different access control models (DAC, MAC, RBAC, ABAC) and recommend the most suitable one based on the provided environment and requirements.
- Provide a step-by-step implementation plan for the chosen model, including roles definition, permission mapping, and MFA integration steps.
- Outline best practices for user account lifecycle management (creation, modification, deactivation) and password policies.
- Suggest tools or platforms that can assist with access control management (e.g., Active Directory, Okta, Azure AD) and describe how to evaluate their effectiveness.
Output format A structured plan with:
- Summary of recommended model and rationale
- Step-by-step implementation checklist (numbered steps with estimated effort)
- Best practices list (bullet points)
- Tool recommendations with pros/cons
- Key metrics to measure effectiveness (e.g., number of access violations, time to revoke access)
Guardrails
- Do not assume specific vendor products unless the user mentions them; keep recommendations generic.
- If the context indicates a high-risk environment, prioritize security over convenience.
- Do not include code or configuration scripts unless explicitly requested.
Example {{system_or_environment}}: "Corporate network with 500 employees, using Windows Active Directory." {{access_control_requirements}}: "Need RBAC and MFA for all remote access." {{current_state}}: "Basic user accounts, no MFA." {{compliance_standards}}: "SOC2."
Open this prompt Planning · Intermediate
Build a Vulnerability Management Program
Use this when you need to develop or improve a vulnerability management program for your IT infrastructure.
Role You are a senior cybersecurity consultant specializing in vulnerability management. Your goal is to guide the user in designing a comprehensive program that identifies, prioritizes, and remediates vulnerabilities efficiently.
Context you provide
- {{organization_size}} — number of employees or endpoints
- {{current_practices}} — existing vulnerability scanning or patching processes (if any)
- {{industry}} — relevant compliance requirements (e.g., PCI-DSS, HIPAA)
- {{technology_stack}} — key systems, OS, cloud providers
- {{budget_level}} — low, medium, high
- {{key_stakeholders}} — security team, IT, management
Instructions
- Ask for any missing inputs before starting.
- Outline the key components of a vulnerability management program: asset inventory, scanning frequency, prioritization framework (CVSS, exploitability), remediation workflows, reporting, and continuous improvement.
- Recommend specific tool categories (open-source or commercial) based on budget and tech stack (do not name specific products without disclaimer).
- Provide a step-by-step implementation roadmap with milestones.
- Suggest metrics to measure program effectiveness (e.g., mean time to remediate, vulnerability closure rate).
Output format A comprehensive program document with sections: Overview, Components (each with description and recommendation), Tool Recommendations (by category), Implementation Roadmap (on a timeline), Metrics and KPIs. Use numbered lists for steps. Tone: professional and prescriptive.
Guardrails
- Do not recommend specific commercial products without a disclaimer; suggest categories and mention that specific tools should be evaluated.
- Flag if budget is low that free tools exist but may have limitations.
- Stay within program design; do not execute actual scans or provide scripts.
Example {{organization_size}} = "500 employees, 2000 endpoints", {{current_practices}} = "Quarterly manual scans with Nessus", {{industry}} = "finance", {{technology_stack}} = "Windows Server, Linux, AWS", {{budget_level}} = "medium", {{key_stakeholders}} = "CISO, IT Director, DevOps lead"
Open this prompt Planning · Advanced
Compliance Monitoring and Reporting Setup
Use this when you need to implement tools and processes for automated compliance monitoring and generate audit-ready reports.
Open this prompt Analysis · Intermediate
Compliance Monitoring Automation
Use this when you need to design or improve automated compliance monitoring processes to detect and report regulatory violations.
Open this prompt Automation · Intermediate
Compliance Program Management and Tracking
Use this when you need to manage a compliance program, track activities, and identify risks.
Open this prompt Planning · Intermediate
Compliance Risk Assessment
Use this when you need to identify and mitigate compliance risks in your organization.
Open this prompt Analysis · Intermediate
Compliance Training Content Creation
Use this when you need to develop training materials, guides, or explanations for employees on specific compliance regulations and best practices.
Open this prompt Creating · Intermediate
Conduct Compliance Gap Analysis
Use this when you need to identify where your organization falls short of compliance requirements and get actionable recommendations.
Open this prompt Analysis · Advanced
Create Compliance Checklist
Use this when you need a comprehensive checklist of regulatory requirements and best practices for your organization.
Open this prompt Creating · Beginner
Create Compliance Documentation
Use this when you need to draft or structure compliance policies, procedures, or training guidelines for your organization.
Open this prompt Creating · Intermediate
Data Privacy Guidelines Overview
Use this when you need to understand and implement data privacy regulations and measures to protect sensitive information.
Open this prompt Research · Intermediate
Data Retention and Destruction Policy
Use this when you need to create or update policies for retaining and securely destroying data in compliance with regulations.
Open this prompt Creating · Intermediate
Develop Security Awareness Training Program
Use this when you need to create a comprehensive security awareness training program for employees, covering compliance requirements and best practices.
Open this prompt Creating · Intermediate
Disaster Recovery Plan Development
Use this when you need guidance creating a comprehensive disaster recovery plan that meets regulatory expectations.
Open this prompt Planning · Advanced
Establish Compliant Change Management
Use this when you need to create a change management process that ensures regulatory compliance for IT environment changes.
Open this prompt Planning · Intermediate
Incident Response and Reporting
Use this when you need guidance on responding to security incidents, preserving evidence, and meeting reporting requirements.
Open this prompt Planning · Intermediate
Incident Response Plan Development
Use this when you need to develop a comprehensive incident response plan for security breaches, aligned with industry standards and compliance requirements.
Open this prompt Planning · Intermediate
Policy and Procedure Documentation
Use this when you need to create or update compliance policy and procedure documentation, including templates, checklists, and step-by-step guides.
Open this prompt Writing · Intermediate
Prepare for Compliance Audits
Use this when you need to prepare for a compliance audit, including documentation, processes, and gap identification.
Open this prompt Planning · Intermediate
Prepare for Compliance Audits
Use this when you need step-by-step guidance on documenting systems, conducting gap analyses, and collecting evidence for compliance audits.
Open this prompt Planning · Intermediate
Research Regulatory Requirements
Use this when you need to understand current regulations, compliance obligations, or recent changes in a specific industry or region.
Open this prompt Research · Intermediate
Review Compliance Policy Alignment
Use this when you need to evaluate an existing compliance policy against regulatory requirements and identify areas for improvement.
Open this prompt Analysis · Intermediate