Prompt lesson · 19 prompts
Compliance and Risk Management prompts for IT Consultants
19 ready-to-use prompts from our AI for IT Consultants course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Compliance Assessment Support
Use this when you need to conduct compliance assessments by summarizing regulations, analyzing requirements, and understanding consequences of non-compliance.
Role You are a compliance and regulatory expert. Your goal is to provide accurate, up-to-date information and analysis to support compliance assessments in specific industries.
Context you provide
- {{specific regulation}}: The regulation to assess (e.g., GDPR, HIPAA, CCPA).
- {{specific industry}}: The industry in which the compliance assessment is being conducted (e.g., healthcare, finance).
- {{specific countries}}: The countries or regions whose regulations are relevant (if comparing).
Instructions
- If any required context is missing, ask for it before proceeding.
- Summarize the latest regulatory updates relevant to the specified regulation and industry.
- Analyze the key requirements of the regulation, breaking them down into actionable compliance steps.
- Explain the potential consequences of non-compliance, including fines, legal actions, and reputational damage.
- If multiple countries are specified, compare how the regulations differ and highlight implications for global operations.
- Provide examples of companies affected by these regulations to illustrate real-world impact.
Output format
- A structured report with sections: Regulatory Updates, Key Requirements, Consequences of Non-Compliance, and Comparative Analysis (if applicable).
- Use bullet points and subheadings for clarity.
- Keep the tone professional and authoritative.
- Length: approximately 500-700 words.
Guardrails
- Do not provide legal advice; recommend consulting a legal professional for specific cases.
- Do not invent regulatory details; flag any uncertainties and suggest verifying with official sources.
- Stay within the scope of compliance assessment; avoid unrelated IT or security topics.
Example
- {{specific regulation}}: "GDPR", {{specific industry}}: "healthcare", {{specific countries}}: "UK and Germany"
Open this prompt Research · Advanced
Analyze IT Security Risks
Use this when you need to identify security vulnerabilities and compliance gaps in your IT infrastructure to prioritize remediation.
Role You are a cybersecurity risk analyst who assesses IT infrastructure for vulnerabilities and compliance gaps, providing prioritized remediation recommendations.
Context you provide
- {{technology_focus}}: Specific technology or system to analyze (e.g., cloud services, on-premise servers).
- {{regulation}}: Applicable regulation or standard (e.g., GDPR, HIPAA, ISO 27001).
- {{infrastructure_details}}: Overview of the IT environment, including architecture and existing security measures.
Instructions
- If any inputs are missing, ask for them before starting.
- Identify potential security vulnerabilities within the specified technology focus, considering common attack vectors.
- Assess compliance gaps against the given regulation, referencing specific requirements.
- Prioritize the identified risks based on likelihood and impact.
- Suggest remediation steps for each vulnerability, including quick wins and long-term strategies.
- Recommend tools or practices to enhance overall security posture.
- Compare the findings to industry standards or benchmarks.
Output format
- A structured risk assessment report with sections: Executive Summary, Vulnerability Findings, Compliance Gap Analysis, Prioritized Risk Register, Remediation Recommendations, and Tool Suggestions.
- Use tables for risk prioritization; keep tone technical and objective.
Guardrails
- Do not claim to perform actual penetration testing; focus on analysis based on provided information.
- Clearly state assumptions about the infrastructure and threat landscape.
- Do not provide legal compliance certification; suggest consulting with a qualified auditor.
Example
- {{technology_focus}}: "cloud services (AWS)"
- {{regulation}}: "GDPR"
- {{infrastructure_details}}: "We use S3 for storage, EC2 for compute, and have MFA enabled for root account."
Open this prompt Analysis · Advanced
Compliance Policy Drafting and Implementation
Use this when you need to draft, strengthen, or implement compliance policies for a specific industry or regulation.
Open this prompt Creating · Intermediate
Create Compliance Training Modules
Use this when you need to develop interactive training materials and modules on compliance and risk management for employees.
Open this prompt Creating · Intermediate
Compliance Monitoring with AI
Use this when you need to monitor communications and interactions for compliance with regulations or internal policies.
Open this prompt Analysis · Advanced
Incident Response Plan Development
Use this when you need to develop or refine an incident response plan for compliance breaches, including templates, guidelines, and stakeholder considerations.
Open this prompt Planning · Intermediate
Summarize Regulatory Updates
Use this when you need to stay current with regulatory changes and understand their impact on your organization.
Open this prompt Research · Intermediate
Compliance Assessment Tool Design
Use this when you need to design a tool to assess an organization's compliance with specific regulations and industry standards.
Open this prompt Creating · Advanced
Risk Management Training Module
Use this when you need to create an interactive risk management training module with real-world examples and case studies.
Open this prompt Creating · Intermediate
Compliance Documentation Automation
Use this when you need to automate the creation, review, and management of compliance documentation to ensure accuracy and completeness.
Open this prompt Automation · Advanced
Risk Assessment Questionnaire Design
Use this when you need to design a risk assessment questionnaire for a specific industry or organizational type, focusing on relevant risk areas.
Open this prompt Creating · Intermediate
Compliance Dashboard Insights
Use this when you need to design or interpret a compliance monitoring dashboard, including selecting key metrics and visualizing data for actionable insights.
Open this prompt Analysis · Advanced
Design Risk Mitigation Strategy Planner
Use this when you need to create a tool or framework to help businesses analyze risks and develop mitigation strategies.
Open this prompt Creating · Advanced
Compliance Audit Checklist Creation
Use this when you need to create or refine a compliance audit checklist for a specific industry or regulation.
Open this prompt Creating · Intermediate
Risk Impact Analysis Tool
Use this when you need to build a tool that assesses the potential impact of various risks on your business.
Open this prompt Creating · Advanced
Compliance Policy Template Library
Use this when you need to create a library of customizable compliance policy templates for various industries and organizational needs.
Open this prompt Creating · Intermediate
Risk Register Database Setup
Use this when you need to create a structured risk register to track, categorize, and prioritize organizational risks.
Open this prompt Creating · Intermediate
Compliance Training Chatbot Design
Use this when you need to design a compliance training chatbot that delivers role-specific, on-demand learning content.
Open this prompt Creating · Intermediate
Build Risk Assessment Simulation Tool
Use this when you need to design a simulation tool to model risk scenarios and interpret results for better decision-making.
Open this prompt Creating · Advanced