AI Prompts for ChatGPT for Cybersecurity

Write an executive summary of this security risk for a non-technical audience: [DESCRIBE VULNERABILITY OR THREAT]. Explain the business impact in concrete terms, not technical jargon, and clearly state what decision or investment is needed.

I need to present the security posture of [DESCRIBE SYSTEM OR ORGANIZATION] to the board. Write talking points that cover our current risk level, what we have done to improve it, what remains to be done, and the investment required.

Write a risk register entry for [DESCRIBE SECURITY RISK]. Include the risk description, likelihood, potential business impact, current controls, residual risk level, and recommended treatment.

A security incident just occurred: [DESCRIBE INCIDENT BRIEFLY]. Write the executive communication that explains what happened, what we know right now, what we are doing, and what leadership should expect in the next 24 hours.

I need to make the business case for a security investment in [DESCRIBE CONTROL OR TOOL]. Write the memo that quantifies the risk being addressed, explains the cost of the control, and frames it as a business decision rather than a compliance checkbox.

Write a security policy for [DESCRIBE POLICY AREA, E.G. "ACCEPTABLE USE OF COMPANY DEVICES"]. Include the purpose, scope, requirements, exceptions process, and consequences for violations. Use clear language, not legalese.

Create an incident response procedure for [DESCRIBE INCIDENT TYPE, E.G. "PHISHING ATTACK" OR "RANSOMWARE"]. Include detection, containment, eradication, recovery, and post-incident review steps with roles assigned.

Write the security section of our employee onboarding guide. Cover the most important security habits (password management, phishing recognition, device security, data handling), and explain why each matters.

I need to document the security architecture for [DESCRIBE SYSTEM]. Write the architecture overview section that explains the key security controls, trust boundaries, data flows, and how the design addresses our primary threats.

Write the change management security checklist for [DESCRIBE TYPE OF CHANGE, E.G. "NEW THIRD-PARTY VENDOR INTEGRATION"]. List every security question that must be answered before the change is approved.

Write a phishing awareness training scenario for employees. Create three realistic phishing email examples (each using a different technique), explain the red flags in each, and give guidance on what to do when they spot one.

Write the monthly security tip for our internal newsletter. The topic is [DESCRIBE TOPIC, E.G. "SAFE USE OF PUBLIC WI-FI" OR "RECOGNIZING SOCIAL ENGINEERING"]. Make it practical, specific, and under 200 words.

Create a security tabletop exercise scenario for [DESCRIBE TEAM, E.G. "IT LEADERSHIP"]. The scenario is [DESCRIBE INCIDENT]. Include the scenario description, inject events at 0, 30, and 60 minutes, and discussion questions for each phase.

Write the security awareness quiz for new employees. Cover phishing, password security, device handling, data classification, and incident reporting. Include 10 questions with four-option multiple choice and answer explanations.

I want to run a "human firewall" training for the sales team specifically. Write the training content that focuses on the risks most relevant to sales: social engineering via LinkedIn, wire fraud, and CRM security.

We are preparing for a [SOC 2 / ISO 27001 / NIST CSF / OTHER] audit. Write the gap assessment framework: the key control areas, what evidence is typically required, and how to prioritize remediation effort.

Write the vendor security questionnaire for evaluating [DESCRIBE VENDOR TYPE, E.G. "SAAS DATA PROCESSORS"]. Cover data handling, access controls, incident response, compliance certifications, and subprocessor management.

I need to write our annual security report to the board. Key metrics are: [LIST METRICS, E.G. PHISHING SIMULATION RATES, VULNERABILITY SCAN RESULTS, INCIDENTS THIS YEAR]. Write the narrative that contextualizes the data and proposes next-year priorities.

A customer wants to review our security practices before signing. Write the security one-pager that covers our key controls, certifications, data handling practices, and incident response capability in a trust-building way.

Write the privacy impact assessment template for [DESCRIBE NEW SYSTEM OR PROCESS]. Include data inventory, purpose limitation, data minimization, retention, access controls, and third-party sharing sections.