Prompt lesson · 25 prompts
IT Compliance and Governance prompts for Vice Presidents of IT
25 ready-to-use prompts from our AI for Vice Presidents of IT course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Assess IT Risk And Mitigation Options
Use this when you need to turn known IT infrastructure or project details into a structured risk assessment with mitigation strategies.
Role — You are an IT risk analyst who optimizes for a defensible, prioritized risk assessment, not a generic list of possible threats.
Context you provide
- {{system_or_project}} — the infrastructure, software, project, or cloud service being assessed
- {{known_details}} — architecture, access controls, or current practices you can share
- {{business_context}} — what's at stake (e.g., customer data, regulatory scope, uptime requirements)
Instructions
- Ask for the system/project details and business context if not provided.
- Identify potential risks specific to {{system_or_project}} based on {{known_details}}, categorized by type (e.g., access control, data exposure, availability, third-party).
- Rate each risk by likelihood and impact given {{business_context}}.
- Propose a specific mitigation strategy for each medium-to-high risk.
- Note which risks require specialist review (e.g., a formal penetration test or compliance audit) rather than being resolved from this assessment alone.
Output format — A risk register table (risk, category, likelihood, impact, mitigation), ending with a short summary of the top 3 priorities.
Guardrails
- Base risks only on {{known_details}}; do not claim to have scanned or tested systems you have not been given data on.
- Do not provide exploit or attack instructions; keep all content defensive and remediation-focused.
- Recommend independent verification (audit, pentest, legal review) for any risk with compliance or legal exposure.
Example — {{system_or_project}} = migration to a new cloud CRM platform; {{known_details}} = current access control policy and data flow diagram; {{business_context}} = handles customer PII under GDPR.
Open this prompt Analysis · Advanced
Automate Compliance Report Generation
Use this when you need to automate the creation of compliance reports, extracting data from multiple sources and delivering actionable insights to leadership.
Role You are a compliance reporting automation expert. Your goal is to design a system that automatically generates accurate, timely compliance reports, highlighting non-compliance issues and recommending remediation actions.
Context you provide
- {{report_criteria}}: The specific compliance criteria or regulations to report on (e.g., GDPR, HIPAA, internal policies).
- {{data_sources}}: The systems or databases where compliance data resides (e.g., GRC tools, spreadsheets, logs).
- {{report_frequency}}: How often reports are needed (e.g., daily, weekly, monthly).
- {{stakeholders}}: The audience for the reports (e.g., VP of IT, board, auditors).
Instructions
- Ask for any missing inputs before starting.
- Design a data extraction and consolidation process that pulls from the provided sources and normalizes the data.
- Define the structure of the compliance report, including sections for overall status, non-compliance issues, and remediation recommendations.
- Create a template for the report that is clear and accessible to non-technical stakeholders.
- Outline how to automate the report generation and distribution, including scheduling and alerting for critical breaches.
- Provide guidance on how to continuously improve the reporting process based on feedback.
Output format Provide a detailed plan with sections: Data Extraction Strategy, Report Structure, Automation Workflow, and Continuous Improvement. Include sample report outlines and automation tool suggestions.
Guardrails
- Do not fabricate compliance data; base all examples on the provided context.
- Ensure recommendations are practical and aligned with the stakeholder's technical level.
- Flag any data quality issues that could affect report accuracy.
Example Report criteria: GDPR compliance; data sources: OneTrust, Salesforce, custom database; report frequency: monthly; stakeholders: VP of IT, Data Protection Officer.
Open this prompt Automation · Intermediate
Build A Security Incident Response Plan
Use this when you need to create or strengthen your organization's plan for responding to a security breach.
Open this prompt Planning · Advanced
Build Compliance Monitoring Dashboard
Use this when you need to design a real-time compliance monitoring dashboard that tracks metrics, generates alerts, and provides insights for proactive governance.
Open this prompt Creating · Advanced
Chat-Based Audit Support System
Use this when you need to design a chat-based support system to assist auditors during compliance audits by providing quick access to documentation and answering queries.
Open this prompt Creating · Advanced
Compliance Change Impact Assessment
Use this when you need to evaluate how proposed IT changes affect compliance requirements and ensure proper governance.
Open this prompt Analysis · Intermediate
Compliance Chatbot Content Development
Use this when you need to create content for a compliance chatbot that answers employee questions and guides on IT governance.
Open this prompt Creating · Intermediate
Compliance Knowledge Sharing Platform Design
Use this when you need to design a collaborative platform for employees to share compliance experiences, best practices, and lessons learned.
Open this prompt Planning · Intermediate
Compliant IT Change Management
Use this when you need to design, assess, or improve IT change management processes to ensure compliance and minimize risk.
Open this prompt Planning · Advanced
Confidential Incident Reporting System Design
Use this when you need to design a chat-based system for employees to report compliance incidents confidentially and receive guidance.
Open this prompt Planning · Intermediate
Create Interactive Compliance Training Portal
Use this when you need to build an online training portal with interactive compliance modules, personalized learning paths, and chatbot support.
Open this prompt Creating · Intermediate
Create IT Compliance Training Content
Use this when you need training materials and awareness content to teach employees IT compliance and governance practices.
Open this prompt Creating · Intermediate
Data Privacy Compliance Guidance
Use this when you need to ensure your organization's data handling practices comply with privacy regulations like GDPR and CCPA.
Open this prompt Analysis · Intermediate
Design A Compliance Audit Approach
Use this when you need a structured plan for auditing compliance with a specific policy or regulation, including what to check and how to document it.
Open this prompt Planning · Advanced
Develop Compliance Self-Assessment Tool
Use this when you need to create an interactive self-assessment tool that guides employees through compliance questions and provides personalized improvement recommendations.
Open this prompt Creating · Intermediate
Disaster Recovery Plan Development
Use this when you need to develop, test, or improve disaster recovery plans to ensure business continuity during IT disruptions.
Open this prompt Planning · Intermediate
Draft An IT Compliance Policy
Use this when you need to draft or improve an IT compliance and governance policy aligned to specific regulations or standards.
Open this prompt Writing · Advanced
Evaluate Vendor IT Compliance
Use this when you need to assess and score vendors against your IT governance and compliance requirements.
Open this prompt Analysis · Intermediate
Implement Continuous Compliance Monitoring
Use this when you need to set up continuous monitoring of IT compliance and governance activities, including real-time alerts and user-friendly access.
Open this prompt Planning · Advanced
Incident Reporting and Documentation
Use this when you need to develop or improve procedures and templates for reporting and documenting security incidents.
Open this prompt Creating · Intermediate
Interactive Incident Response Playbook Creation
Use this when you need to create interactive playbooks that guide IT teams through compliance-related incidents step by step.
Open this prompt Creating · Advanced
IT Asset Management Compliance
Use this when you need to establish or improve processes for tracking and managing IT assets to ensure licensing and regulatory compliance.
Open this prompt Planning · Intermediate
IT Compliance Reporting Automation
Use this when you need to generate reports and metrics to demonstrate IT governance compliance to stakeholders and regulatory bodies.
Open this prompt Analysis · Advanced
IT Governance Framework Design
Use this when you need to establish or improve an IT governance framework aligned with organizational goals.
Open this prompt Planning · Advanced
Regulatory Compliance Assessment
Use this when you need to understand, assess, or improve compliance with a specific regulation affecting your IT infrastructure.
Open this prompt Analysis · Advanced