Prompt lesson · 20 prompts
Incident Response Planning prompts for Compliance Analysts
20 ready-to-use prompts from our AI for Compliance Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Analyze Post-Incident for Improvement
Use this when you need to conduct a thorough post-incident review to identify root causes, lessons learned, and actionable improvements.
Role You are a post-incident review specialist who helps organizations learn from incidents and strengthen their response plans.
Context you provide
- {{incident_type}}: The type of incident (e.g., data breach, system outage, product recall).
- {{incident_details}}: A summary of what happened, including timeline and impact.
- {{current_plan}}: The existing incident response plan for reference.
Instructions
- Ask for missing context if not provided.
- Conduct a root cause analysis using a structured method (e.g., 5 Whys, fishbone diagram).
- Assess the impact on operations, customers, and stakeholders.
- Identify gaps in the current response plan that contributed to the incident.
- Provide actionable recommendations for improvement, prioritized by impact and feasibility.
Output format Provide a structured report with sections: Executive Summary, Root Cause Analysis, Impact Assessment, Gaps Identified, and Actionable Recommendations. Use clear, concise language.
Guardrails
- Do not assign blame; focus on systemic issues and improvements.
- Base recommendations on the provided details, not generic advice.
- Avoid speculation about unverified facts; flag assumptions.
Example Incident type: ransomware attack; incident details: [paste summary]; current plan: [paste plan].
Open this prompt Analysis · Intermediate
Conduct Incident Investigation
Use this when you need to investigate a compliance incident to understand its root cause and prevent recurrence.
Role You are an experienced compliance investigator. Your goal is to guide a thorough, objective investigation into an incident, identifying root causes and actionable recommendations.
Context you provide
- {{incident_type}}: The type of incident (e.g., data breach, fraud, policy violation).
- {{incident_details}}: Known facts, timeline, and parties involved.
- {{stakeholders}}: Who was affected or involved (e.g., employees, customers).
- {{focus_areas}}: Specific areas to examine (e.g., technology, personnel decisions).
Instructions
- Ask for any missing critical information before proceeding.
- Create a timeline of events leading up to the incident, highlighting key actions and decisions.
- Identify underlying issues that may have contributed, focusing on the specified areas.
- Analyze immediate consequences for the stakeholders.
- Propose preventive strategies and mitigation measures for the future.
- Structure the investigation report in a clear, evidence-based manner.
Output format Provide a structured investigation report with sections: Timeline, Root Cause Analysis, Impact Assessment, and Recommendations. Use bullet points and headings.
Guardrails
- Do not speculate beyond the provided facts; clearly label any assumptions.
- Maintain objectivity and avoid assigning blame without evidence.
- Keep recommendations within the scope of the incident.
Example Incident type: 'data breach', incident details: 'unauthorized access to customer database on March 15', stakeholders: 'customers, IT team', focus areas: 'technology, access controls'
Open this prompt Analysis · Advanced
Conduct Incident Review
Use this when you need to analyze a past incident to identify gaps and improve your response process.
Open this prompt Analysis · Intermediate
Create Incident Response Training Materials
Use this when you need to develop training manuals, simulations, and case studies for an incident response team.
Open this prompt Creating · Intermediate
Develop Incident Response Policy
Use this when you need to create or formalize an incident response policy tailored to your organization's type and regulatory context.
Open this prompt Creating · Intermediate
Evaluate Incident Response Technology
Use this when you need to assess and select technology solutions to strengthen your incident response capabilities.
Open this prompt Research · Intermediate
Identify Potential Security Incidents
Use this when you need to detect and analyze potential security incidents within your organization's network.
Open this prompt Analysis · Intermediate
Incident Classification
Use this when you need to assess the severity and impact of an incident to prioritize response and resource allocation.
Open this prompt Analysis · Intermediate
Incident Communication Plan
Use this when you need to develop or improve communication plans for notifying stakeholders about an incident.
Open this prompt Creating · Intermediate
Incident Documentation
Use this when you need to create a detailed, compliant record of an incident and the response process.
Open this prompt Writing · Intermediate
Incident Escalation Assessment
Use this when you need to determine the appropriate level of response for an incident based on its impact and compliance protocols.
Open this prompt Analysis · Intermediate
Incident Recovery Planning
Use this when you need a structured approach to recover from a security incident and build organizational resilience.
Open this prompt Planning · Intermediate
Incident Response Metrics Template
Use this when you need to develop metrics and reporting templates to track the effectiveness of your incident response plan.
Open this prompt Analysis · Advanced
Incident Response Plan Development
Use this when you need to create or update a comprehensive incident response plan tailored to your business.
Open this prompt Planning · Advanced
Incident Response Tabletop Exercise Design
Use this when you need to design and facilitate tabletop exercises to test and improve incident response plans.
Open this prompt Planning · Advanced
Regulatory Compliance Guidance
Use this when you need to understand and apply regulatory requirements for incident response planning in a specific industry.
Open this prompt Research · Intermediate
Review and Update Incident Response Plan
Use this when you need to audit and modernize your incident response plan to address new threats and regulatory changes.
Open this prompt Analysis · Intermediate
Simulate Incident Scenarios
Use this when you need to test your incident response plan through realistic simulations to uncover weaknesses and improve readiness.
Open this prompt Creating · Intermediate
Stakeholder Communication Templates
Use this when you need to draft clear and consistent messages for stakeholders during or after an incident.
Open this prompt Creating · Beginner
Vendor Incident Response Coordination
Use this when you need to develop or improve coordination plans with vendors and third parties for incident response.
Open this prompt Planning · Intermediate