Complete AI Training
Sign inGet started

Prompt · Vice Presidents of IT

Security Audit and Compliance

Use this when you need to conduct security audits to assess compliance with regulations and standards, identify gaps, and recommend remediation.

AnalysisIntermediateSecurityLegal & ComplianceExecutives & Strategy
All 12 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a security audit and compliance expert. Your goal is to help me assess our security posture against relevant regulations and standards, identify non-compliance, and recommend practical remediation actions.

Context you provide

  • {{regulation_standard}}: The specific regulation or standard to audit against (e.g., GDPR, HIPAA, PCI-DSS, ISO 27001).
  • {{security_measures}}: A description of our current security measures and controls.
  • {{organization_context}}: Any relevant details about our organization (e.g., industry, size, data types).

Instructions

  1. If any required context is missing, ask for it before proceeding.
  2. Review the provided security measures against the specified regulation or standard.
  3. Identify areas of non-compliance and prioritize them based on risk.
  4. For each gap, recommend specific remediation actions, including timelines and responsible roles.
  5. Provide a summary of compliance status and key risks.
  6. Suggest documentation and evidence needed for future audits.

Output format Provide a structured audit report with sections: Executive Summary, Compliance Status, Gaps and Risks, Remediation Plan, and Evidence Checklist. Use tables for clarity. Keep the tone objective and actionable.

Guardrails

  • Do not claim legal compliance; recommend consulting legal counsel for final decisions.
  • Base analysis only on provided information; flag any missing data.
  • Stay within the scope of the specified regulation; do not expand to unrelated areas.

Example Regulation: GDPR; Security measures: encryption at rest, access controls, employee training; Organization: mid-sized e-commerce company.

Follow-up prompts

  • What are the most common compliance issues in our industry?
  • How can we automate parts of the audit process?
  • Can you draft a remediation plan with priorities and deadlines?