Prompt lesson · 19 prompts
Incident Response Planning prompts for Information Security Analysts
19 ready-to-use prompts from our AI for Information Security Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Step-by-Step Incident Response Plan
Use this when you need a detailed, step-by-step guide to developing an incident response plan, including threat assessment and recovery procedures.
Role You are a security planning expert who guides organizations through the step-by-step creation of an incident response plan. Your goal is to produce a clear, actionable plan that addresses the organization's specific risks and recovery needs.
Context you provide
- {{specific organization type}}: e.g., "manufacturing company" or "university"
- {{specific assets or sectors}}: e.g., "customer database" or "research data"
- {{current security posture}}: e.g., "basic antivirus" or "advanced SIEM" (optional)
Instructions
- If any required context is missing, ask for it before proceeding.
- Provide a step-by-step guide for developing an incident response plan, covering threat assessment, communication protocols, and recovery procedures.
- Help identify potential security incidents relevant to the organization and prioritize them based on severity and impact.
- Suggest how to create a risk matrix to visualize priorities.
- Explain the role of employee training in mitigating risks.
- Recommend resources for further reading.
Output format A numbered step-by-step guide with clear headings, a risk matrix template, and a summary of key actions. Tone: instructional and practical.
Guardrails
- Do not assume specific security tools; ask if not provided.
- Do not provide legal or compliance advice; focus on operational planning.
- Keep the guide generic enough to be adaptable, but specific to the provided context.
Example {{specific organization type}} = "regional hospital", {{specific assets or sectors}} = "patient records and medical devices", {{current security posture}} = "firewall and antivirus"
Open this prompt Planning · Intermediate
Tailored Incident Response Plan
Use this when you need to develop a comprehensive incident response plan customized to your organization's industry, infrastructure, and specific threats.
Role You are a cybersecurity strategy consultant who helps organizations build robust incident response plans. Your goal is to produce a plan that is practical, aligned with industry best practices, and tailored to the organization's unique risks.
Context you provide
- {{organization type or industry}}: e.g., "healthcare provider" or "financial services firm"
- {{specific threats}}: e.g., "ransomware" or "insider threats"
- {{infrastructure}}: e.g., "cloud-based" or "on-premises" (optional)
Instructions
- If any required context is missing, ask for it before proceeding.
- Outline the essential components of an incident response plan, including roles, communication protocols, detection, containment, eradication, recovery, and post-incident review.
- Customize the plan based on the specified industry, infrastructure, and threats.
- Provide examples of how similar organizations have structured their plans, highlighting lessons learned.
- Suggest metrics to measure the plan's effectiveness.
- Recommend best practices from industry leaders.
Output format A structured plan outline with sections for each component, including bullet points and tables where helpful. Include a section on customization notes. Tone: strategic and actionable.
Guardrails
- Do not fabricate case studies; if used, mark them as illustrative and based on common patterns.
- Do not provide legal or compliance advice; suggest consulting relevant experts.
- Keep the plan at a strategic level; avoid overly technical details unless requested.
Example {{organization type or industry}} = "mid-sized e-commerce company", {{specific threats}} = "DDoS attacks and payment fraud", {{infrastructure}} = "AWS cloud"
Open this prompt Planning · Advanced
Threat Assessment and Incident Response
Use this when you need to analyze cybersecurity threats and shape your incident response plan.
Open this prompt Analysis · Advanced
Create Comprehensive Incident Communication Plan
Use this when you need a full communication plan covering both internal and external stakeholders for a security incident.
Open this prompt Creating · Intermediate
Develop Internal Stakeholder Communication Plan
Use this when you need to plan effective communication with internal stakeholders during a security incident.
Open this prompt Planning · Beginner
Security Incident Training Guide
Use this when you need to create or improve security incident response training materials for employees.
Open this prompt Creating · Intermediate
Design Tabletop Exercises for Incident Response
Use this when you need to design tabletop exercises that simulate security incidents to test your response plan and team readiness.
Open this prompt Creating · Intermediate
Incident Reporting and Documentation Guide
Use this when you need to establish or improve incident reporting and documentation processes, including templates and compliance-aligned guidelines.
Open this prompt Creating · Intermediate
Establish Continuous Improvement Process for IR
Use this when you need to set up a process for regularly reviewing and updating your incident response plan.
Open this prompt Planning · Intermediate
Integrate Threat Intelligence into Incident Response
Use this when you need to integrate threat intelligence feeds into your incident response plan to improve response to emerging threats.
Open this prompt Planning · Advanced
Automate Incident Response Processes
Use this when you need to automate incident response processes to improve efficiency and reduce response times.
Open this prompt Planning · Advanced
Create Scenario-Based Training for Incident Response
Use this when you need to develop realistic cyberattack scenarios to train your incident response team.
Open this prompt Creating · Intermediate
Conduct Post-Incident Analysis and Reporting
Use this when you need to analyze a security incident and produce a report that identifies gaps in your incident response plan.
Open this prompt Analysis · Intermediate
Security Tool Integration Guidance
Use this when you need to integrate your incident response plan with existing security tools to streamline detection and response.
Open this prompt Planning · Advanced
Align Incident Response with Legal Compliance
Use this when you need to ensure your incident response plan meets legal and regulatory requirements for data breaches and security incidents.
Open this prompt Analysis · Intermediate
Vendor Incident Coordination Plan
Use this when you need to coordinate with vendors and third-party partners during a security incident.
Open this prompt Planning · Intermediate
Develop IR Testing and KPI Framework
Use this when you need to build a checklist and KPIs for testing and improving your incident response plan.
Open this prompt Planning · Advanced
Employee Incident Response Training
Use this when you need to develop engaging, role-specific training materials that raise employee awareness of incident response procedures and best practices.
Open this prompt Creating · Intermediate
Integrate Incident Response with Business Continuity
Use this when you need to align incident response planning with broader business continuity to minimize operational disruption.
Open this prompt Planning · Intermediate