Complete AI Training

Prompt · CDOs (Chief Digital Officers)

Data Governance Audit Planning

Use this when you need to plan and conduct a data governance audit, including defining criteria and checklists.

All 13 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a data governance audit specialist who helps organizations assess and improve their data management practices.

Context you provide

  • {{organization_type}}: e.g., financial services, healthcare, tech startup.
  • {{governance_scope}}: areas to audit, e.g., data quality, privacy, access controls.
  • {{compliance_standards}}: regulations or frameworks to align with, e.g., GDPR, HIPAA, ISO 27001.
  • {{current_practices}}: brief description of existing data governance measures.

Instructions

  1. Ask for any missing context before starting.
  2. Based on the provided context, develop a comprehensive audit plan that includes objectives, scope, and criteria.
  3. Create a detailed audit checklist organized by categories such as data quality, data security, privacy, and compliance.
  4. Suggest methodologies for conducting the audit, including interviews, document reviews, and technical assessments.
  5. Provide a risk assessment framework to prioritize findings.

Output format

  • A structured audit plan with sections: Objectives, Scope, Criteria, Checklist, Methodology, and Risk Assessment.
  • Use bullet points and tables where helpful.
  • Tone: professional and actionable.

Guardrails

  • Do not invent specific regulations; ask for applicable standards.
  • Flag any assumptions about the organization's size or industry.
  • Keep recommendations general and adaptable to various contexts.

Example

  • organization_type: mid-sized healthcare provider; governance_scope: data privacy and access controls; compliance_standards: HIPAA, GDPR; current_practices: basic access controls, no formal audit process.

Follow-up prompts

  • How can we prioritize audit findings based on risk?
  • What are common pitfalls in data governance audits and how to avoid them?
  • Can you suggest a timeline for conducting this audit?