Prompt lesson · 29 prompts
Security Assessment prompts for Directors of IT
29 ready-to-use prompts from our AI for Directors of IT course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Comprehensive Security Risk Assessment
Use this when you need to conduct a thorough security risk assessment for your organization's infrastructure, systems, or processes.
Role You are a cybersecurity risk assessment expert who helps organizations identify, prioritize, and mitigate security risks in a structured manner.
Context you provide
- {{scope}}: The area to assess (e.g., network infrastructure, new software, post-incident).
- {{current_state}}: Any details about the current environment or systems.
- {{objectives}}: Specific goals or concerns for the assessment.
Instructions
- If any context is missing, ask for it before starting.
- Based on the scope, outline a step-by-step risk assessment process.
- Identify potential vulnerabilities and threats relevant to the scope.
- Prioritize risks based on likelihood and impact.
- Recommend mitigation strategies and best practices.
- If post-incident, include root cause analysis and remediation steps.
Output format Provide a structured risk assessment report with sections: Scope, Methodology, Risk Identification, Risk Prioritization, and Mitigation Recommendations. Use clear, actionable language.
Guardrails
- Do not fabricate vulnerabilities or threats; base analysis on provided information and general best practices.
- Flag any assumptions about the environment.
- Stay within the scope of the assessment; do not provide unrelated security advice.
Example {{scope}} = "New software system deployment" {{current_state}} = "We are using a cloud-based CRM" {{objectives}} = "Ensure security before launch"
Open this prompt Analysis · Intermediate
Data Loss Prevention Strategy
Use this when you need to implement or improve data loss prevention measures, including monitoring, training, and classification.
Role You are a data loss prevention (DLP) strategist, optimizing for comprehensive protection of sensitive data through monitoring, training, and classification.
Context you provide
- {{current-infrastructure}}: Your existing network and monitoring infrastructure.
- {{data-types}}: The types of sensitive data you need to protect.
- {{objectives}}: Specific goals (e.g., prevent unauthorized access, educate employees, implement classification).
Instructions
- If any context is missing, ask for it before proceeding.
- Based on your objectives, develop a step-by-step DLP strategy.
- For monitoring, suggest automated systems and techniques, including anomaly detection or machine learning models, and explain how to integrate them.
- For training, outline a comprehensive program with interactive elements to educate employees on identifying and handling sensitive data.
- For classification, provide a framework aligned with industry standards, including access controls and encryption for each level.
- Prioritize actions based on risk and impact.
Output format Provide a detailed plan with sections for monitoring, training, and classification. Use bullet points and tables for clarity, and include implementation steps and best practices.
Guardrails
- Do not recommend specific commercial tools without noting they are examples.
- Flag any assumptions about your infrastructure or data.
- Stay within the scope of DLP; do not provide legal advice.
Example Current infrastructure: On-premise servers with basic firewall, Data types: Customer PII and financial records, Objectives: Implement monitoring and train staff.
Open this prompt Planning · Advanced
Data Sensitivity Classification
Use this when you need to classify data by sensitivity and recommend appropriate security measures.
Open this prompt Analysis · Intermediate
Incident Communication Strategy
Use this when you need to plan and execute effective communication with stakeholders during security incidents.
Open this prompt Communication · Intermediate
Incident Recovery Plan Development
Use this when you need to develop or improve your organization's incident recovery plans and processes.
Open this prompt Planning · Intermediate
Incident Reporting Process Design
Use this when you need to establish or improve a process for documenting and reporting security incidents.
Open this prompt Creating · Intermediate
Incident Response Coordination Plan
Use this when you need to coordinate response efforts during security incidents and improve team collaboration.
Open this prompt Planning · Intermediate
Incident Response Plan Creation
Use this when you need a structured incident response plan for your organization's IT security.
Open this prompt Planning · Intermediate
IT Risk Assessment
Use this when you need to evaluate risks to your IT assets and develop mitigation strategies.
Open this prompt Analysis · Intermediate
Penetration Test Planning
Use this when you need to plan and execute penetration tests to identify security weaknesses.
Open this prompt Planning · Advanced
Security Architecture Review
Use this when you need a comprehensive evaluation of your security architecture to identify vulnerabilities and enhance protection.
Open this prompt Analysis · Advanced
Security Architecture Review
Use this when you need to evaluate your security architecture against current and emerging threats.
Open this prompt Analysis · Advanced
Security Audit Planning
Use this when you need to plan and conduct a security audit to assess controls, identify gaps, and improve your security posture.
Open this prompt Planning · Intermediate
Security Auditing Process
Use this when you need to establish a systematic process for auditing security controls, ensuring compliance, and identifying vulnerabilities.
Open this prompt Planning · Advanced
Security Awareness Assessment
Use this when you need to evaluate the effectiveness of your security awareness program and identify areas for improvement.
Open this prompt Analysis · Intermediate
Security Awareness Campaign Design
Use this when you need to design engaging and effective security awareness campaigns to promote a culture of security within your organization.
Open this prompt Creating · Intermediate
Security Awareness Training Program
Use this when you need to develop a comprehensive security awareness training program to educate employees about cyber threats and best practices.
Open this prompt Creating · Intermediate
Security Compliance Assessment
Use this when you need to evaluate your organization's security policies and controls against regulatory standards.
Open this prompt Analysis · Intermediate
Security Compliance Management Guide
Use this when you need to implement, maintain, or automate compliance with security standards like GDPR or HIPAA.
Open this prompt Planning · Advanced
Security Incident Root Cause Analysis
Use this when you need to analyze security incidents to identify root causes, assess impact, and improve future response.
Open this prompt Analysis · Intermediate
Security Policy Enforcement Strategy
Use this when you need to ensure consistent enforcement of security policies across your organization.
Open this prompt Planning · Intermediate
Security Policy Review and Alignment
Use this when you need to review and update your security policies to align with industry best practices and regulatory requirements.
Open this prompt Analysis · Intermediate
Security Policy Review and Gap Analysis
Use this when you need to review and update your organization's security policies to ensure compliance and effectiveness.
Open this prompt Analysis · Intermediate
Security Risk Mitigation Strategies
Use this when you need to develop and implement measures to reduce identified security risks in your organization.
Open this prompt Planning · Intermediate
Security Tool Evaluation and Selection
Use this when you need to evaluate and select security tools to enhance your organization's security posture.
Open this prompt Analysis · Intermediate
Security Training Content Creation
Use this when you need to create specific security training content such as modules, quizzes, or videos.
Open this prompt Creating · Beginner
Simulated Cyber Attack Assessment
Use this when you need to evaluate security controls through simulated attacks and improve defenses.
Open this prompt Analysis · Advanced
Vulnerability Scanning and Remediation
Use this when you need to plan or execute vulnerability scans, interpret findings, and prioritize remediation for your IT infrastructure.
Open this prompt Analysis · Advanced
Vulnerability Scanning and Remediation
Use this when you need to conduct vulnerability scans to identify weaknesses in your IT infrastructure and get recommendations for remediation.
Open this prompt Analysis · Intermediate