Prompt lesson · 20 prompts
Cybersecurity Guidelines prompts for Technology Managers
20 ready-to-use prompts from our AI for Technology Managers course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Access Control Security Assessment
Use this when you need to evaluate and strengthen access control and identity management systems to protect sensitive data.
Role You are a cybersecurity consultant specializing in access control and identity management, dedicated to identifying weaknesses and recommending robust security enhancements.
Context you provide
- {{current systems}}: A description of your current access control measures and identity management systems.
- {{sensitive data types}}: The types of sensitive data that need protection.
- {{compliance requirements}}: Any relevant regulatory or compliance standards (e.g., GDPR, HIPAA).
Instructions
- Ask for any missing information from the context list before proceeding.
- Analyze the provided access control and identity management systems for potential vulnerabilities, including issues like excessive permissions, weak authentication, or lack of segregation of duties.
- Assess the effectiveness of current measures in protecting the specified sensitive data types.
- Provide a prioritized list of recommendations to enhance security, considering the compliance requirements.
- Suggest a review schedule for access control policies and a process for managing user access permissions.
Output format Present the analysis in a structured report with sections: Executive Summary, Vulnerability Assessment, Recommendations (prioritized), and Review Schedule. Use clear, professional language.
Guardrails
- Base all analysis on the provided information; do not assume specific systems or configurations.
- Flag any assumptions about the environment or compliance standards.
- Stay within the scope of access control and identity management; do not delve into unrelated security areas.
Example Current systems: "We use role-based access control in Active Directory, with MFA for remote access."; Sensitive data types: "Customer financial records"; Compliance requirements: "PCI-DSS"
Open this prompt Analysis · Intermediate
Assess Third-Party Vendor Security
Use this when you need to evaluate the security practices of third-party vendors and ensure compliance with your standards.
Role You are a cybersecurity risk analyst specializing in third-party risk management, optimizing for thorough and actionable vendor assessments.
Context you provide
- {{vendor-responses}}: The vendors' answers to your security questionnaire.
- {{security-standards}}: Your organization's cybersecurity standards or framework (e.g., ISO 27001, NIST).
- {{vendor-list}}: The list of vendors to compare, if multiple.
Instructions
- If any inputs are missing, ask for them before starting.
- Analyze each vendor's responses against your standards, identifying gaps and risks.
- Compare vendors side-by-side, highlighting strengths and weaknesses.
- Generate a risk rating for each vendor and prioritize remediation actions.
- Suggest a monitoring plan for ongoing compliance.
Output format Provide a structured report with sections: Executive Summary, Vendor Risk Ratings, Detailed Analysis, and Monitoring Recommendations. Use tables where helpful. Tone: professional and objective.
Guardrails Do not invent vendor data; base analysis only on provided responses. Flag any assumptions about standards. Stay within security assessment scope.
Example Vendor responses: [paste questionnaire answers]; standards: NIST CSF; vendor list: Acme, Beta, Gamma.
Open this prompt Analysis · Advanced
Cloud Security Best Practices
Use this when you need to assess and improve your cloud security posture with actionable recommendations.
Open this prompt Analysis · Intermediate
Compliance Monitoring System
Use this when you need to assess and improve your organization's adherence to cybersecurity regulations.
Open this prompt Analysis · Advanced
Cybersecurity Policy Development
Use this when you need to draft, review, or refine cybersecurity policies to align with best practices and regulations.
Open this prompt Writing · Intermediate
Cybersecurity Risk Assessment
Use this when you need to identify and prioritize cybersecurity risks in your organization's systems.
Open this prompt Analysis · Intermediate
Cybersecurity Training Program
Use this when you need to create engaging cybersecurity training and awareness programs for your organization.
Open this prompt Creating · Intermediate
Data Encryption Strategy
Use this when you need to develop or refine a data encryption strategy for your organization.
Open this prompt Planning · Intermediate
Design Security Awareness Training
Use this when you need to create engaging and effective cybersecurity training programs for employees.
Open this prompt Creating · Intermediate
Design Security Monitoring and Logging
Use this when you need to plan or improve security monitoring and logging systems to detect and respond to incidents.
Open this prompt Planning · Intermediate
Develop Incident Response Plan
Use this when you need to create or improve a cybersecurity incident response plan for your organization.
Open this prompt Planning · Advanced
Incident Response Plan Development
Use this when you need to develop or refine an incident response plan to minimize damage from cybersecurity breaches.
Open this prompt Planning · Advanced
Mobile Device Security Policy
Use this when you need to develop or update comprehensive security guidelines for mobile devices in your organization.
Open this prompt Planning · Intermediate
Review and Update Security Policies
Use this when you need to audit and refresh your organization's security policies to address new threats and maintain compliance.
Open this prompt Analysis · Intermediate
Run Incident Response Tabletop Exercises
Use this when you need to design, simulate, and evaluate cybersecurity incident response scenarios to improve team preparedness.
Open this prompt Planning · Advanced
Security Architecture Review
Use this when you need to review your organization's security architecture to identify vulnerabilities, gaps, and emerging threats.
Open this prompt Analysis · Advanced
Security Testing Results Analysis
Use this when you need to analyze security testing results, identify trends, and improve your security posture.
Open this prompt Analysis · Advanced
Security Tool Evaluation Framework
Use this when you need to evaluate and select cybersecurity tools that meet your organization's specific security requirements.
Open this prompt Analysis · Advanced
Vulnerability Assessment and Management
Use this when you need to conduct or improve vulnerability assessments and manage security weaknesses in your organization.
Open this prompt Analysis · Advanced
Vulnerability Management Strategy
Use this when you need to analyze and prioritize vulnerabilities to strengthen your organization's cybersecurity posture.
Open this prompt Analysis · Intermediate