Prompt lesson · 22 prompts
Implementing Security Technologies prompts for Cybersecurity Analysts
22 ready-to-use prompts from our AI for Cybersecurity Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Build a Vulnerability Management System
Use this when you need to design and implement a system to identify, prioritize, and remediate vulnerabilities.
Role You are a senior cybersecurity analyst specializing in vulnerability management. Your goal is to help me build a comprehensive system that continuously identifies, prioritizes, and remediates vulnerabilities across our infrastructure.
Context you provide
- {{organization_type}}: e.g., a financial services firm, a healthcare provider, a tech startup.
- {{infrastructure_scope}}: the systems and assets in scope (e.g., cloud, on-premises, endpoints, network devices).
- {{current_process}}: any existing vulnerability scanning or patch management practices.
- {{compliance_requirements}}: relevant standards (e.g., PCI-DSS, ISO 27001, NIST).
- {{automation_preference}}: whether you want to automate scanning, reporting, or remediation workflows.
Instructions
- Ask for missing context before starting.
- Design a vulnerability management program with key components: asset inventory, scanning, prioritization, remediation, and reporting.
- Provide a step-by-step implementation plan, including tool selection criteria and integration with existing systems.
- Develop a methodology for prioritizing vulnerabilities based on severity, exploitability, and business impact.
- Suggest automation opportunities for scanning, reporting, and ticketing to improve efficiency.
- Outline a remediation process with roles, timelines, and escalation paths.
Output format Provide a detailed plan with sections: Program Overview, Key Components, Implementation Steps, Prioritization Methodology, Automation Opportunities, and Remediation Workflow. Use tables and bullet points. Keep the tone professional and actionable.
Guardrails
- Do not recommend specific commercial tools without noting open-source alternatives.
- Ensure the plan is adaptable to different organization sizes and maturity levels.
- Stay within vulnerability management; do not expand into broader security strategy unless asked.
Example organization_type: "a mid-sized e-commerce company", infrastructure_scope: "AWS cloud, 200 endpoints, 50 web apps", current_process: "manual scans quarterly", compliance_requirements: "PCI-DSS", automation_preference: "yes, for scanning and reporting"
Open this prompt Planning · Advanced
Build Security Awareness Training
Use this when you need to design, deploy, or improve a security awareness training program for your organization.
Role You are a cybersecurity training and awareness specialist. Your goal is to help me create an engaging and effective security awareness training program that reduces human risk.
Context you provide
- {{organization_type}}: e.g., a tech startup, a hospital, a government agency.
- {{audience}}: the employee roles and technical proficiency (e.g., non-technical staff, developers, executives).
- {{training_topics}}: specific areas to cover (e.g., phishing, data protection, safe browsing).
- {{delivery_format}}: e.g., online platform, in-person workshops, micro-learning.
Instructions
- Ask for missing context before starting.
- Design a curriculum outline with modules, learning objectives, and suggested duration for each.
- Recommend interactive elements (e.g., quizzes, simulations, gamification) to increase engagement.
- Provide strategies to encourage participation and track progress (e.g., completion rates, phishing simulation results).
- Suggest how to keep the content up-to-date with emerging threats.
Output format A training program plan with sections: Curriculum Outline, Interactive Elements, Engagement Strategies, and Measurement Plan. Use bullet points and clear headings.
Guardrails
- Do not invent specific platform features; provide general recommendations.
- Stay within security awareness training; do not cover technical security controls.
- Flag any assumptions about the audience's existing knowledge.
Example Organization type: a 500-person hospital; audience: nurses and administrative staff; topics: phishing, HIPAA data protection, safe browsing; format: online micro-learning.
Open this prompt Creating · Intermediate
Configure Secure Email Gateway
Use this when you need to set up, optimize, or evaluate a secure email gateway to protect against phishing and malicious emails.
Open this prompt Planning · Intermediate
Deploy a Secure VPN
Use this when you need to plan and implement a VPN for secure remote access.
Open this prompt Planning · Intermediate
Deploy Network Intrusion Detection
Use this when you need to plan, deploy, or evaluate a Network Intrusion Detection System (NIDS) in your environment.
Open this prompt Planning · Advanced
Encryption and Key Management Implementation
Use this when you need to plan, implement, or evaluate encryption and key management practices to protect sensitive data and meet compliance requirements.
Open this prompt Planning · Intermediate
Endpoint Protection Deployment Strategy
Use this when you need to plan and execute the deployment of endpoint protection tools across an organization, including addressing sector-specific challenges.
Open this prompt Planning · Intermediate
Endpoint Protection Implementation Guide
Use this when you need step-by-step guidance on installing, configuring, and managing endpoint protection software for specific devices or environments.
Open this prompt Planning · Beginner
Firewall Configuration Best Practices
Use this when you need to configure or update firewalls to secure network traffic, address common challenges, and maintain ongoing security.
Open this prompt Planning · Intermediate
Implement a Web Application Firewall
Use this when you need to deploy and configure a WAF to protect web applications.
Open this prompt Planning · Intermediate
Implement Multi-Factor Authentication
Use this when you need to plan, deploy, or troubleshoot MFA across your organization's systems.
Open this prompt Planning · Intermediate
Implement Security Assessment Tools
Use this when you need to select, deploy, and configure security assessment tools to identify vulnerabilities in your systems.
Open this prompt Planning · Intermediate
Implement Two-Factor Authentication
Use this when you need to plan, select, and deploy 2FA for your organization.
Open this prompt Planning · Intermediate
Incident Response Platform Implementation
Use this when you need to design or improve a centralized security incident response platform for your organization.
Open this prompt Planning · Intermediate
Integrate DLP Solutions
Use this when you need to integrate DLP technologies into existing systems, including AI-driven tools, to prevent data leakage.
Open this prompt Planning · Advanced
Intrusion Detection System Setup
Use this when you need to set up an intrusion detection system (IDS) to monitor for and respond to potential security breaches.
Open this prompt Planning · Intermediate
Plan DLP Implementation
Use this when you need to understand, plan, or evaluate a Data Loss Prevention (DLP) solution for your organization.
Open this prompt Planning · Intermediate
Set Up a Web Application Firewall
Use this when you need step-by-step guidance for configuring a WAF to protect your web applications.
Open this prompt Planning · Intermediate
SIEM Implementation Guide
Use this when you need a practical guide to implement or improve a SIEM solution for security event collection and analysis.
Open this prompt Planning · Intermediate
SIEM Implementation Roadmap
Use this when you need to plan, select, or optimize a SIEM solution for your organization's security event management.
Open this prompt Planning · Intermediate
SOAR Implementation Strategy
Use this when you need to understand, plan, or implement SOAR solutions to automate security operations.
Open this prompt Planning · Advanced
SOC Implementation Blueprint
Use this when you need to establish or upgrade a Security Operations Center for 24/7 monitoring and response.
Open this prompt Planning · Advanced