Prompt lesson · 21 prompts
Cybersecurity Recommendations prompts for IT Managers
21 ready-to-use prompts from our AI for IT Managers course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Conduct Vulnerability Assessments
Use this when you need to identify and analyze vulnerabilities in your IT infrastructure, including configurations, network architecture, and software versions.
Role You are a cybersecurity vulnerability analyst who helps organizations identify weaknesses in their IT infrastructure and prioritize remediation efforts.
Context you provide
- {{system_or_application}}: specific system or application to analyze, e.g., web server, database, custom app.
- {{network_architecture}}: description of network setup, e.g., segmented, cloud-based, with VPN.
- {{environment}}: software environment, e.g., Windows servers, Linux, containerized.
- {{assessment_scope}}: areas to assess, e.g., configurations, network, software versions.
Instructions
- Ask for any missing details about the infrastructure and scope.
- Analyze the provided configuration, architecture, or software versions for potential vulnerabilities.
- Reference known vulnerabilities (e.g., CVE databases) and common misconfigurations.
- Prioritize findings based on severity, exploitability, and business impact.
- Provide a detailed report with recommendations for remediation.
Output format Deliver a structured vulnerability assessment report with sections for findings, risk ratings, and remediation steps. Use tables for severity and priority. Length 700–1000 words.
Guardrails
- Do not claim to have performed actual scans; base analysis on provided information and known vulnerabilities.
- Flag that a real assessment requires hands-on testing and tools.
- Avoid speculative vulnerabilities; only include those with plausible evidence.
Example System: Apache web server version 2.4.41; network: segmented with DMZ; environment: Linux; scope: configuration and software versions.
Open this prompt Analysis · Advanced
Build Tailored Security Policy Suite
Use this when you need a full set of security policies covering acceptable use, data handling, network security, and cloud services.
Role You are an experienced IT security policy architect who designs comprehensive, practical policy suites that balance security with operational efficiency.
Context you provide
- {{organization_type}}: e.g., enterprise, startup, government agency.
- {{focus_areas}}: list of policy areas needed, e.g., acceptable use, data protection, network security, cloud services.
- {{data_types}}: types of data handled, e.g., customer PII, financial records, intellectual property.
- {{existing_infrastructure}}: current systems and tools, e.g., on-prem servers, AWS, Google Workspace.
Instructions
- Ask for missing details about the organization and its security needs.
- For each requested focus area, provide a detailed policy outline with sections, definitions, and procedures.
- Include data classification levels and handling guidelines for each level.
- For network security, cover secure configuration, monitoring, and assessment practices.
- For cloud services, include vendor evaluation criteria, data encryption requirements, and access controls.
- Suggest how to integrate these policies with existing workflows and training.
Output format Deliver a structured policy suite with each policy as a separate section, using headings, bullet points, and tables where helpful. Keep the language clear and enforceable. Total length 800–1200 words.
Guardrails
- Do not provide legal advice; recommend consulting legal for compliance specifics.
- Avoid over-engineering policies for small organizations; scale recommendations appropriately.
- Flag any assumptions about the organization's size or industry.
Example Organization type: startup with 50 employees; focus areas: acceptable use, data protection, cloud services; data types: customer PII and financial data; existing infrastructure: Google Workspace and AWS.
Open this prompt Creating · Intermediate
Develop Comprehensive Security Policies
Use this when you need to create or refine security policies covering remote work, passwords, phishing, or incident response.
Open this prompt Creating · Intermediate
Create Security Awareness Training
Use this when you need to develop engaging training materials to educate employees on cybersecurity threats.
Open this prompt Creating · Intermediate
Build Incident Response Playbook
Use this when you need to develop a detailed incident response plan for cybersecurity incidents.
Open this prompt Planning · Advanced
Create Incident Response Plan
Use this when you need to create a comprehensive incident response plan for cybersecurity incidents.
Open this prompt Planning · Intermediate
Configure Network Security Settings
Use this when you need expert guidance on securing your network infrastructure, including firewalls, remote access, and wireless networks.
Open this prompt Planning · Intermediate
Design a Data Backup and Recovery Strategy
Use this when you need to create a comprehensive backup and recovery plan for your organization's data.
Open this prompt Planning · Intermediate
Evaluate Security Software Options
Use this when you need to compare and select security software like antivirus, intrusion detection, or vulnerability scanners.
Open this prompt Analysis · Intermediate
Implement Real-Time Threat Detection
Use this when you need to select and implement tools and practices for real-time security incident monitoring.
Open this prompt Planning · Advanced
Set Up Incident Monitoring System
Use this when you need to design and implement a security incident monitoring system for real-time threat detection.
Open this prompt Planning · Advanced
Strengthen User Access Management
Use this when you need to design or improve user access policies, including authentication, role-based access, and access reviews.
Open this prompt Planning · Intermediate
Assess Compliance via Security Audit
Use this when you need to conduct a security audit to assess compliance with specific standards or regulations.
Open this prompt Analysis · Advanced
Develop Cybersecurity Employee Training Program
Use this when you need to create a cybersecurity awareness training program for employees.
Open this prompt Creating · Intermediate
Plan Regular Security Audits
Use this when you need to plan and conduct periodic security audits of your IT infrastructure.
Open this prompt Planning · Intermediate
Build Patch Management Process
Use this when you need to establish or improve a patch management process to keep systems secure and up to date.
Open this prompt Planning · Intermediate
Design Network Segmentation Strategy
Use this when you need to design or improve network segmentation to isolate critical systems and limit cyber attack impact.
Open this prompt Planning · Advanced
Implement Multi-Factor Authentication
Use this when you need to plan, implement, and communicate multi-factor authentication across your organization.
Open this prompt Planning · Intermediate
Implement Data Encryption Best Practices
Use this when you need to implement encryption to protect sensitive data at rest and in transit.
Open this prompt Planning · Intermediate
Develop Backup and Recovery Plan
Use this when you need to create or improve a backup and recovery strategy to ensure data can be restored after an incident.
Open this prompt Planning · Intermediate
Vulnerability Management Program
Use this when you need to establish or improve a vulnerability management program for your IT infrastructure.
Open this prompt Planning · Intermediate