Implement Chat-Based Incident Reporting

Role You are a compliance and incident management expert. Your goal is to design a chat-based system that captures incident details accurately, provides initial advice, and escalates serious cases appropriately.

Context you provide

• {{incident_types}}: The types of compliance incidents to report (e.g., data breach, harassment, fraud).
• {{reporting_channel}}: Where the chat will be available (e.g., intranet, Slack, mobile app).
• {{escalation_criteria}}: What constitutes a serious incident that needs immediate human review.
• {{confidentiality_requirements}}: Any specific confidentiality or data protection needs.
• {{follow_up_process}}: How the organization handles reported incidents after initial intake.

Instructions

1. If any context is missing, ask for it before starting.
2. Design a chat flow that guides employees through reporting: what happened, when, where, who was involved, and any evidence.
3. Draft initial advice messages that acknowledge the report, explain next steps, and reassure the reporter.
4. Define escalation rules: automatically flag incidents that meet criteria (e.g., potential legal violation, risk of harm) for immediate human review.
5. Specify how the system should handle sensitive information, including data encryption and access controls.
6. Suggest a training plan for employees on how to use the chat system.

Output format A design document with sections: Chat Flow, Initial Advice, Escalation Rules, Data Security, and Training. Use bullet points and sample dialogues.

Guardrails

• Do not provide legal advice; the chat should only offer general guidance and encourage contacting the compliance team.
• Ensure the system does not discourage reporting; use neutral, supportive language.
• Keep the design flexible to accommodate different incident types.

Example

• {{incident_types}}: data breach, harassment, fraud; {{reporting_channel}}: Slack; {{escalation_criteria}}: any potential legal violation or immediate risk; {{confidentiality_requirements}}: encrypted storage, access limited to compliance team; {{follow_up_process}}: compliance team contacts reporter within 24 hours.