Prompt lesson · 21 prompts
Social Engineering Defense Strategies prompts for Cybersecurity Analysts
21 ready-to-use prompts from our AI for Cybersecurity Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Access Control Policy Review
Use this when you need to review and strengthen access control policies to prevent unauthorized access and align with employee roles.
Role You are a cybersecurity analyst specializing in access control, helping organizations identify vulnerabilities and implement least-privilege principles.
Context you provide
- {{system}}: The specific system or application where access control policies are in place.
- {{current_policies}}: A summary of existing access control policies or a link to them.
- {{employee_roles}}: The different roles within the organization and their required access levels.
- {{compliance_requirements}}: Any regulatory or internal compliance standards to consider.
Instructions
- If any context is missing, ask for it before starting.
- Review the provided access control policies and identify potential vulnerabilities or weaknesses that could lead to unauthorized access.
- Evaluate whether access levels align with employee roles and the principle of least privilege.
- Provide specific recommendations for strengthening policies, such as role-based access control (RBAC), regular audits, and multi-factor authentication.
- Suggest methods for monitoring and enforcing compliance with the updated policies.
Output format Present findings in a structured report with sections for vulnerabilities, role alignment, recommendations, and compliance considerations. Use bullet points and clear headings. Keep the tone professional and actionable.
Guardrails
- Do not invent specific vulnerabilities; base analysis on provided information.
- Flag any assumptions about the system or roles.
- Stay within the scope of access control; avoid broader security advice unless directly relevant.
Example
- {{system}}: HR management system
- {{current_policies}}: All employees have access to all HR records.
- {{employee_roles}}: HR managers, recruiters, payroll specialists, general staff.
- {{compliance_requirements}}: GDPR and internal data protection policy.
Open this prompt Analysis · Intermediate
Design Anonymous Security Incident Reporting
Use this when you need to establish a confidential and anonymous system for employees to report security incidents and social engineering attempts.
Open this prompt Planning · Intermediate
Generate User Security Education Materials
Use this when you need to create user-friendly guides and documents that educate employees on social engineering risks and security best practices.
Open this prompt Creating · Beginner
Implement and Promote 2FA Organization-Wide
Use this when you need a step-by-step plan to implement, manage, and promote Two-Factor Authentication (2FA) across your organization.
Open this prompt Planning · Intermediate
Incident Response Plan Development
Use this when you need to create a structured incident response plan for social engineering attacks, tailored to your organization's specific assets and risks.
Open this prompt Planning · Intermediate
Incident Response Playbook Creation
Use this when you need a detailed, step-by-step playbook for responding to a specific social engineering attack scenario, such as a phishing email targeting a particular department.
Open this prompt Planning · Intermediate
Password Policy Development
Use this when you need to create or update a password management policy that balances security with user convenience for your organization.
Open this prompt Planning · Beginner
Phishing Awareness Training Design
Use this when you need to create engaging, interactive training modules that teach employees to recognize and report phishing attempts.
Open this prompt Creating · Intermediate
Phishing Simulation Campaign Design
Use this when you need to create realistic phishing simulation campaigns to test and improve employee awareness of social engineering threats.
Open this prompt Creating · Intermediate
Phishing Simulation Exercise Design
Use this when you need to design phishing simulation exercises that provide immediate feedback and enhance employee recognition of social engineering tactics.
Open this prompt Creating · Intermediate
Security Audit Checklist Creation
Use this when you need to conduct security audits focused on social engineering vulnerabilities and create checklists or report templates.
Open this prompt Analysis · Intermediate
Security Awareness Assessment Design
Use this when you need to create questionnaires or quizzes to assess employees' knowledge of social engineering threats and identify training gaps.
Open this prompt Creating · Beginner
Security Awareness Campaign Design
Use this when you need to create engaging, targeted security awareness materials for your organization.
Open this prompt Creating · Intermediate
Security Awareness Metrics Development
Use this when you need to establish metrics to measure the effectiveness of your security awareness program.
Open this prompt Analysis · Intermediate
Security Awareness Training Design
Use this when you need to develop engaging training modules to educate employees on social engineering threats and security best practices.
Open this prompt Creating · Intermediate
Security Incident Reporting System
Use this when you need to create templates, chatbots, or training to encourage and streamline employee reporting of social engineering incidents.
Open this prompt Creating · Intermediate
Security Metrics and Reporting
Use this when you need to generate reports and dashboards to track the effectiveness of your social engineering defenses.
Open this prompt Analysis · Advanced
Social Engineering Awareness Materials
Use this when you need to develop a variety of educational materials to teach employees about social engineering threats.
Open this prompt Creating · Beginner
Social Engineering Policy Development
Use this when you need to draft or refine policies that help defend against social engineering attacks and align with your organization's goals.
Open this prompt Writing · Intermediate
Tabletop Exercise Facilitation
Use this when you need to plan and facilitate a tabletop exercise to test your incident response plan against a realistic social engineering scenario.
Open this prompt Planning · Advanced
Create Social Media Security Guidelines
Use this when you need to develop clear, actionable guidelines for employees on safe social media usage and recognizing social engineering threats.
Role You are a cybersecurity analyst with expertise in social media security and employee training. Your goal is to produce a practical, easy-to-follow set of guidelines that help employees avoid sharing sensitive information and recognize social engineering attempts on social platforms.
Context you provide
Instructions
Output format A structured document with sections: Do's and Don'ts, Red Flags, Response Steps, and Privacy Settings. Use bullet points and short paragraphs. Tone: clear, friendly, and actionable.
Guardrails
Example Platform: LinkedIn; Job role: sales representative; Company policy: professional and approachable.
Open this prompt Creating · Beginner