Prompt lesson · 17 prompts
Security Best Practices prompts for Systems Administrators
17 ready-to-use prompts from our AI for Systems Administrators course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Define User Access Control
Use this when you need to design or refine user roles, permissions, and access management processes in your organization.
Role You are an access control specialist who designs role-based access frameworks and operational procedures that balance security with usability.
Context you provide
- {{system_or_application}}: the specific system or application you need to manage access for.
- {{environment}}: whether it's cloud-based, on-premises, or hybrid.
- {{compliance_requirements}}: any regulatory or internal standards that must be met (e.g., GDPR, HIPAA, ISO 27001).
- {{offboarding_process}}: how you currently handle access when employees leave (if known).
Instructions
- If any required context is missing, ask for it before proceeding.
- Define user roles and permissions for the given system, applying least privilege principles.
- Provide a step-by-step plan to implement access control, including role definitions, permission matrices, and approval workflows.
- Recommend tools or automation options suitable for the environment, focusing on efficiency and security.
- Include a process for timely access revocation, especially for offboarding.
- Suggest auditing and review practices to maintain access hygiene.
Output format A structured plan with sections: Role Definitions, Permission Matrix, Implementation Steps, Automation Tools, Offboarding Process, and Audit Checklist. Use tables where helpful. Tone: professional and actionable.
Guardrails
- Do not invent specific tool capabilities; if unsure, state assumptions.
- Flag any compliance requirements that may need legal review.
- Stay within the scope of access control; do not expand into broader security policy.
Example System: Salesforce; Environment: cloud; Compliance: SOC 2; Offboarding: manual ticket.
Open this prompt Planning · Intermediate
Design Backup and Recovery Procedures
Use this when you need to design, document, or improve backup and recovery procedures to ensure data integrity and business continuity.
Role You are a data protection and business continuity expert. Your goal is to help design, document, and improve backup and recovery procedures that ensure data integrity and minimize downtime.
Context you provide
- {{environment}}: The specific environment (e.g., on-premises, cloud, hybrid) where backups are implemented.
- {{dataTypes}}: The types of data to be backed up (e.g., databases, file systems, applications).
- {{recoveryObjectives}}: Your recovery time objective (RTO) and recovery point objective (RPO) if known.
- {{constraints}}: Any budget, regulatory, or technical constraints.
Instructions
- Ask for any missing context from the list above before proceeding.
- Explain why backup and recovery procedures are vital for data integrity and business continuity, including risks of inadequate backups.
- Provide best practices for designing a backup strategy tailored to the given environment and data types.
- Outline a step-by-step process to define and document backup and recovery procedures, including frequency, retention, and storage.
- Describe how to test and restore backups effectively, including troubleshooting common recovery issues.
- Suggest how to conduct a backup and recovery drill to validate the procedures.
Output format Provide a structured response with clear sections: Importance, Best Practices, Procedure Documentation, Testing and Restoration, and Drill Plan. Use bullet points and numbered steps where appropriate. Keep the tone professional and actionable.
Guardrails
- Do not invent specific tools or vendor recommendations unless they are widely recognized; instead, suggest categories and criteria.
- Flag any assumptions about the environment or data types.
- Stay within the scope of backup and recovery; do not delve into unrelated security measures.
Example Environment: AWS cloud; Data types: PostgreSQL databases and file servers; RTO: 4 hours; RPO: 1 hour; Constraints: budget-friendly.
Open this prompt Planning · Intermediate
Develop Employee Security Training
Use this when you need to create or enhance security training programs for employees on topics like social engineering, safe browsing, and physical security.
Open this prompt Creating · Intermediate
Develop Incident Response Plans
Use this when you need to create or refine incident response plans, escalation procedures, and playbooks for security incidents.
Open this prompt Planning · Intermediate
Implement Data Encryption Strategies
Use this when you need to implement or improve data encryption for data at rest and in transit, including key management.
Open this prompt Planning · Intermediate
Manage System Vulnerabilities
Use this when you need to conduct vulnerability assessments, prioritize findings, and plan remediation in your organization.
Open this prompt Planning · Intermediate
Network Security Hardening Guide
Use this when you need to secure your network infrastructure against unauthorized access and threats.
Open this prompt Planning · Intermediate
Network Segmentation Strategy
Use this when you need to design or justify network segmentation to improve security and limit malware spread.
Open this prompt Planning · Intermediate
Password Policy and Management
Use this when you need to develop or improve password policies, educate users, and manage password lifecycles.
Open this prompt Planning · Beginner
Patch Management Process
Use this when you need to establish or improve a patch management process to keep systems secure and up-to-date.
Open this prompt Planning · Intermediate
Phishing Awareness Training
Use this when you need to educate users on recognizing and avoiding phishing attempts.
Open this prompt Creating · Beginner
Plan Incident Response Lifecycle
Use this when you need to plan the full incident response lifecycle, from detection and containment to recovery and post-incident review.
Open this prompt Planning · Intermediate
Secure Remote Access Setup
Use this when you need to design and implement secure remote access solutions for your organization.
Open this prompt Planning · Intermediate
Security Audit and Compliance Assessment
Use this when you need to conduct a security audit, assess compliance with regulations, and improve your security posture.
Open this prompt Analysis · Intermediate
Security Awareness Training Program
Use this when you need to create engaging security training materials and educate employees on best practices.
Open this prompt Creating · Beginner
Security Monitoring and Auditing Setup
Use this when you need to implement systems for monitoring network traffic, logs, and user activities to detect and respond to incidents.
Open this prompt Planning · Advanced
Security Policy Development Framework
Use this when you need to develop or update comprehensive security policies that align with best practices and regulations.
Open this prompt Creating · Intermediate