Prompt lesson · 24 prompts
Policy Creation prompts for Directors of IT
24 ready-to-use prompts from our AI for Directors of IT course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Analyze Feedback and Revise Policy Document
Use this when you need to revise a policy document by analyzing stakeholder feedback and proposing prioritized, concrete changes.
Role — You are a policy analyst and change management consultant. Your goal is to help revise a policy document by analyzing stakeholder feedback and proposing concrete, prioritized revisions.
Context you provide —
- {{policy_name}} — the name of the policy to revise (e.g., Remote Work Policy, Data Security Policy)
- {{current_policy_text}} — the existing policy document or a summary of its key points
- {{stakeholder_feedback}} — a summary of feedback received from stakeholders (e.g., survey results, comments, suggestions)
- {{revision_goals}} — any specific goals for the revision (e.g., improve clarity, address new regulations, increase flexibility)
Instructions —
- Ask for any missing inputs.
- Analyze the feedback to identify main areas requiring revision, noting common themes and conflicting opinions.
- Prioritize the revisions based on impact and urgency, and provide a rationale for each priority.
- Suggest concrete changes to the policy text, including wording improvements and structural adjustments.
- Recommend a timeline for implementing the revisions, including review cycles and communication to stakeholders.
Output format — A structured report with sections: Feedback Analysis, Prioritized Revisions, Suggested Changes, Implementation Timeline, Communication Plan. Use bullet points and clear headings. Tone: objective and actionable.
Guardrails — Do not assume knowledge of the policy's domain; ask for clarification if needed. Do not invent regulatory requirements. Stay within the scope of policy revision based on provided feedback.
Example — {{policy_name}}=Remote Work Policy, {{current_policy_text}}=Current policy allows 2 days WFH per week, requires manager approval, no equipment stipend, {{stakeholder_feedback}}=Employees want more flexibility, managers want clearer guidelines, IT concerned about security, {{revision_goals}}=Increase flexibility, clarify expectations, address security.
Follow-ups —
- How can we prioritize these revisions for maximum impact given limited resources?
- What additional data or input do we need to inform these changes?
- Can you recommend a timeline for implementing the revisions and communicating them to all stakeholders?
Open this prompt Analysis · Intermediate
Bring Your Own Device Policy Creation
Use this when you need to create a comprehensive BYOD policy that balances security, privacy, and employee convenience.
Role You are a cybersecurity and IT policy expert. Your goal is to craft a practical, enforceable BYOD policy that protects company data while respecting employee privacy and legal requirements.
Context you provide
- {{organization name}}: Name of your company or organization.
- {{industry}}: Industry your organization operates in (e.g., finance, healthcare).
- {{employee count}}: Approximate number of employees who will use personal devices.
- {{specific concerns}}: Key issues to address, such as data encryption, device wipe, app whitelisting, or remote work.
Instructions
- Ask for any missing context before starting.
- Outline a BYOD policy structure covering device eligibility, security requirements, employee responsibilities, acceptable use, data protection, and compliance.
- Incorporate specific measures to address the {{specific concerns}} provided.
- Include guidance on employee training, tracking compliance, and incident response.
- Suggest a balance between security and convenience, with optional tiers for different device types.
Output format A structured policy document with sections: Purpose, Scope, Security Requirements, Employee Responsibilities, Data Protection, Compliance Monitoring, and Training. Use clear, actionable language. Keep total length around 500–800 words unless specified otherwise.
Guardrails
- Do not provide legal advice; recommend consulting a legal professional for jurisdiction-specific requirements.
- Flag any assumptions made about the organization's size or industry.
- Stay within the scope of personal device usage for work; do not cover company-owned devices.
Example Organization: Acme Corp | Industry: Finance | Employees: 500 | Specific concerns: data encryption, remote wipe on loss, and app whitelist for Android/iOS.
Open this prompt Creating · Intermediate
Create Remote Work Policy
Use this when you need to create a comprehensive remote work policy covering technology, security, and communication.
Open this prompt Creating · Intermediate
Data Privacy Policy Development
Use this when you need to create or refine a data privacy policy that complies with regulations and addresses data handling practices.
Open this prompt Writing · Intermediate
Data Retention Policy Creation
Use this when you need to develop a data retention policy that defines how long different data types are kept and how they are disposed of.
Open this prompt Writing · Intermediate
Design Policy Monitoring and Enforcement
Use this when you need to design a system for monitoring compliance with a specific policy, including a dashboard and enforcement workflow.
Open this prompt Planning · Intermediate
Develop Mobile Device Management Policy
Use this when you need to create a comprehensive MDM policy covering security, application management, and data protection.
Open this prompt Creating · Intermediate
Draft an Acceptable Use Policy
Use this when you need to create a policy that defines appropriate use of company digital resources, including internet, email, and devices.
Open this prompt Writing · Intermediate
Draft Organizational Policy Document
Use this when you need an initial draft of a policy that reflects your current technology, context, and risk priorities.
Open this prompt Writing · Intermediate
Draft Software Licensing Policy
Use this when you need to create a comprehensive software licensing policy that covers procurement, installation, usage, and compliance.
Open this prompt Writing · Intermediate
Implement IT Policy Effectively
Use this when you need guidance on rolling out a new IT policy, ensuring stakeholder awareness, training, and compliance tracking.
Open this prompt Planning · Intermediate
Incident Response Policy Creation
Use this when you need to draft a comprehensive incident response policy that defines roles, steps, and communication protocols for cybersecurity incidents.
Open this prompt Planning · Intermediate
IT Equipment Disposal Policy Creation
Use this when you need to draft a comprehensive IT equipment disposal policy that ensures data security and environmental compliance.
Open this prompt Creating · Intermediate
Password Policy Design
Use this when you need to create a comprehensive password policy for an organization, covering complexity, expiration, and breach response.
Open this prompt Planning · Intermediate
Plan Policy Dissemination
Use this when you need to develop a communication plan for rolling out a new policy to employees and stakeholders.
Open this prompt Planning · Intermediate
Policy Document Formatting Guidelines
Use this when you need to format a policy document according to an organization's style guide and improve its visual appeal.
Open this prompt Writing · Intermediate
Policy Document Review and Compliance Check
Use this when you need to review a drafted policy for clarity, accuracy, and compliance with organizational and regulatory standards.
Open this prompt Analysis · Intermediate
Policy Gap Analysis and Improvement
Use this when you need to evaluate an existing policy for gaps, assess alignment with best practices, and receive actionable recommendations.
Open this prompt Analysis · Intermediate
Policy Review and Update Recommendations
Use this when you need to review an existing policy document, identify gaps based on recent standards, and recommend updates to maintain alignment.
Open this prompt Analysis · Intermediate
Policy Stakeholder Consultation Process
Use this when you need to plan and execute stakeholder consultations to gather feedback and incorporate diverse perspectives into a policy update.
Open this prompt Communication · Intermediate
Regulatory Policy Research
Use this when you need to research regulations or policies affecting your organization and understand their implications.
Open this prompt Research · Intermediate
Security Policy Framework Creation
Use this when you need to develop a comprehensive security policy covering data protection, access controls, and incident response.
Open this prompt Writing · Advanced
Streamline Policy Approval Process
Use this when you need to design, document, or improve the approval workflow for a new or updated organizational policy, ensuring all required steps and stakeholders are accounted for.
Open this prompt Planning · Intermediate
Social Media Policy Guidelines
Use this when you need to create a social media policy that balances employee engagement with protecting the company's reputation and data.
Role You are a corporate communications and policy expert. Your goal is to help draft a social media policy that encourages responsible employee use while safeguarding the company's reputation and…
The full prompt is for members. Become a member
Open this prompt Writing · Beginner