Prompt lesson · 22 prompts
Security Policy Development prompts for Cybersecurity Analysts
22 ready-to-use prompts from our AI for Cybersecurity Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Create Access Control Policy
Use this when you need to establish rules for granting and revoking access to systems and data in your organization.
Role You are an access control policy specialist who drafts policies that ensure secure access while meeting compliance and operational needs.
Context you provide
- {{organization}}: the name and size of the organization.
- {{systems}}: the systems and data the policy will cover.
- {{compliance_standards}}: any standards like ISO 27001, NIST, or GDPR.
- {{special_requirements}}: any specific needs like remote access or privileged accounts.
Instructions
- Ask for missing context if not provided.
- Draft a policy with sections: Purpose, Scope, Roles and Responsibilities, Access Granting, Access Revocation, Authentication, Authorization, and Review.
- Incorporate principles of least privilege and separation of duties.
- Address remote access, privileged account management, and strong password policies.
- Include procedures for periodic access reviews.
- Align with industry standards and compliance requirements.
Output format A structured policy document in Markdown, with clear headings and bullet points. Tone: formal and precise. Length: 600-900 words.
Guardrails
- Do not provide legal advice; recommend review by legal and compliance teams.
- Avoid overly complex language that may confuse employees.
- Stay in scope of access control; do not expand into broader security policies.
Example Organization: TechCorp (500 employees); Systems: ERP, CRM, cloud storage; Compliance: ISO 27001; Special: remote access and admin accounts.
Open this prompt Writing · Intermediate
Develop Data Classification Policy
Use this when you need to define how data should be classified and protected based on sensitivity.
Role You are a data governance expert who creates data classification policies that protect sensitive information while enabling business use.
Context you provide
- {{organization}}: the name and industry of the organization.
- {{data_types}}: the types of data handled (e.g., PII, financial, IP).
- {{legal_requirements}}: any legal or regulatory requirements (e.g., GDPR, HIPAA).
- {{current_practices}}: any existing classification or handling practices.
Instructions
- Ask for missing context if not provided.
- Define classification levels (e.g., public, internal, confidential, restricted) with clear criteria.
- Specify security controls and access restrictions for each level.
- Align with industry best practices and legal requirements.
- Provide guidance on handling PII, financial data, and intellectual property.
- Suggest implementation steps and training needs.
Output format A comprehensive policy document in Markdown, with sections: Purpose, Classification Levels, Handling Requirements, Access Controls, Compliance, and Implementation. Use tables for classification levels. Tone: formal and clear. Length: 700-1000 words.
Guardrails
- Do not provide legal advice; recommend review by legal counsel.
- Avoid over-classifying data that may hinder operations.
- Stay in scope of data classification; do not expand into other policies.
Example Organization: HealthCare Inc. (healthcare); Data: patient records, billing, research; Legal: HIPAA; Current: no formal policy.
Open this prompt Writing · Intermediate
Draft Acceptable Use Policy
Use this when you need to create or update a policy defining acceptable and prohibited use of company resources.
Open this prompt Writing · Intermediate
Incident Response Plan Development
Use this when you need to create or refine an incident response plan within your security policies to handle and mitigate security incidents effectively.
Open this prompt Planning · Intermediate
Incident Response Policy Development
Use this when you need to create or refine an incident response policy for your organization.
Open this prompt Creating · Intermediate
Mobile Device Security Policy Creation
Use this when you need to establish security policies for mobile devices used within your organization.
Open this prompt Creating · Beginner
Password Policy Development
Use this when you need to establish or update password guidelines to strengthen your organization's security.
Open this prompt Creating · Beginner
Remote Work Security Policy
Use this when you need to draft a comprehensive remote work policy that addresses security considerations for employees.
Open this prompt Writing · Intermediate
Security Policy Compliance Assessment
Use this when you need to assess your organization's adherence to security policies and get actionable remediation steps.
Open this prompt Analysis · Intermediate
Security Policy Documentation
Use this when you need to draft clear, comprehensive security policies aligned with best practices and regulations.
Open this prompt Writing · Intermediate
Security Policy Enforcement Guidance
Use this when you need insights and strategies for enforcing security policies and ensuring compliance across your organization.
Open this prompt Research · Intermediate
Security Policy Framework Creation
Use this when you need to build a structured framework for developing security policies tailored to your organization.
Open this prompt Planning · Advanced
Security Policy Gap Analysis
Use this when you need to analyze your existing security policies against industry best practices and identify actionable improvements.
Open this prompt Analysis · Advanced
Security Policy Gap Analysis
Use this when you need to review existing security policies and identify gaps or areas for improvement.
Open this prompt Analysis · Advanced
Security Policy Implementation Support
Use this when you need practical guidance and troubleshooting support while rolling out a new security policy in your organization.
Open this prompt Planning · Intermediate
Security Policy Regulatory Alignment
Use this when you need to ensure your security policies comply with specific regulations like GDPR, HIPAA, or PCI DSS.
Open this prompt Analysis · Advanced
Security Policy Research Compilation
Use this when you need to gather comprehensive information on security policies and best practices from specific industries or organizations.
Open this prompt Research · Intermediate
Security Policy Review and Update
Use this when you need to review and update your security policies to stay current with emerging threats and technological changes.
Open this prompt Analysis · Intermediate
Security Policy Training Development
Use this when you need to create engaging training materials to educate employees on security policies and best practices.
Open this prompt Creating · Intermediate
Security Policy Training Materials
Use this when you need to create engaging training materials and communication resources to educate employees about security policies.
Open this prompt Creating · Intermediate
Tailored Security Policy Framework
Use this when you need a customized security policy framework for a specific area, such as data protection or network security.
Open this prompt Planning · Advanced
Third-Party Security Requirements
Use this when you need to develop a policy or materials that outline security requirements for third-party vendors and partners.
Open this prompt Creating · Intermediate