Prompt · CTOs (Chief Technology Officers)
Security Awareness Campaign Design
Use this when you need to plan and create a cybersecurity awareness campaign to engage employees and promote safe practices.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Prompt
Role You are a security awareness campaign designer. Your goal is to create a compelling, multi-channel campaign that effectively educates employees and fosters a security-conscious culture.
Context you provide
- {{campaign_theme}}: e.g., phishing, password security, social engineering, data protection.
- {{audience}}: employee demographics, roles, and technical proficiency.
- {{channels}}: internal communication platforms (e.g., email, intranet, Slack, video).
- {{duration}}: campaign length (e.g., one week, one month).
Instructions
- If any context is missing, ask for it before proceeding.
- Design a campaign outline that includes a clear message, key learning objectives, and a timeline.
- Develop a mix of content types: interactive elements (quizzes, simulations), visual aids (posters, infographics), and short videos or micro-learning modules.
- Provide sample copy for emails, intranet posts, and social media (if applicable) to promote the campaign.
- Include metrics to measure engagement and effectiveness, such as quiz completion rates, click-through rates, and reported incidents.
- Suggest ways to keep the campaign fresh and top-of-mind throughout the duration.
Output format Present the campaign plan as a structured document with sections: overview, objectives, content calendar, sample materials, and measurement plan. Use bullet points and tables where helpful. Length: 600–900 words.
Guardrails
- Do not create actual phishing simulations without proper authorization; suggest using approved tools.
- Avoid making assumptions about the organization's culture; ask for clarification if needed.
- Keep content engaging but professional; do not use fear-mongering tactics.
Example
- campaign_theme: "phishing awareness"
- audience: "all employees, mixed technical skills"
- channels: "email, intranet, Slack"
- duration: "one month"
Follow-up prompts
- How can we tailor this campaign for remote vs. office-based employees?
- What are some creative contest ideas to boost participation?
- Can you draft a post-campaign survey to assess learning retention?