AI Prompts for Security Auditing

"I need to gather the current security policies for [ORGANIZATION NAME] to assess our existing security measures and identify any potential gaps. Please summarize the key points from the following documents: [PASTE DOCUMENTS]. Organize the summary into a list of key policies, noting any areas that are outdated or require a review. Ensure that each policy is described in one sentence. If you identify any critical gaps, highlight them separately for further investigation."

"I need to conduct a risk assessment for [SYSTEM/NETWORK] to identify vulnerabilities and improve our overall security posture. Please evaluate the current security measures and provide a list of the top five potential risks based on the following criteria: [PASTE CRITERIA]. For each risk, include a brief description and assess its potential impact on operations. Ensure that the output is formatted as a numbered list. If any risks are particularly high, note them separately for immediate attention."

"I need to evaluate the effectiveness of our existing security controls for [SYSTEM/PROCESS]. Our current security landscape includes the following controls: [PASTE CONTROLS]. Please list their strengths and weaknesses in a table format, with two columns for each aspect. Additionally, suggest at least three areas for improvement based on your analysis. If any control is found to be insufficient, note it separately and provide rationale for your assessment."

"I need to analyze user access rights for [APPLICATION/RESOURCE] within our organization's security framework. Here is the current access list for users: [PASTE ACCESS LIST]. Identify any unnecessary permissions and suggest adjustments to enhance security. Please provide a detailed report listing each user, their current permissions, and your recommendations for adjustments. Ensure that the report is formatted as a table with columns for user name, current permissions, and recommended changes. Flag any users with excessive privileges that could pose a security risk."

"I need to identify compliance requirements for [REGULATORY FRAMEWORK] as part of our security audit process. Understanding these requirements is essential to ensure we adhere to legal obligations and mitigate risks. Please summarize the key compliance obligations and deadlines based on this information: [PASTE COMPLIANCE DOCUMENTS]. Organize the summary into a bullet-point list, highlighting at least five key obligations with their respective deadlines. If any obligations are unclear, note them separately for further clarification."

"I need to create a plan for penetration testing on [SYSTEM/NETWORK] to identify potential vulnerabilities and improve security measures. The plan should address the following considerations: [PASTE CONSIDERATIONS]. Please outline the objectives, scope, and methodology in a structured format with three main sections: objectives (2-3 specific goals), scope (1-2 key areas to focus on), and methodology (detailed steps). If any section lacks clarity or detail, note it separately for further discussion."

"I need to conduct a vulnerability scan on [SYSTEM/APP] to identify potential security weaknesses that could be exploited. I will be using [SCANNING TOOL] for this process. Please provide step-by-step instructions, including any specific settings or configurations I should utilize. Outline the steps in a numbered list and ensure that the instructions are clear and concise. If any vulnerabilities are found, classify them by severity and note any that require immediate attention."

"I need to analyze security logs from [SYSTEM/APPLICATION] to identify potential vulnerabilities and incidents. Here are the logs for review: [PASTE LOGS]. Summarize your findings in a structured format, detailing any unusual patterns or anomalies. Provide at least three specific examples of potential security issues identified. If any logs appear to be incomplete or corrupted, note those separately and recommend further investigation."

"I need to evaluate the incident response plan for [ORGANIZATION NAME]. The goal is to assess its effectiveness in addressing potential security incidents. Please review the following plan: [PASTE INCIDENT RESPONSE PLAN]. Provide feedback in a structured format, including three strengths and three areas for improvement, each described in one to two sentences. Additionally, if any critical vulnerabilities are identified, note them separately for further action."

"I need to conduct a phishing simulation for [DEPARTMENT/TEAM] to assess our vulnerability to social engineering attacks. The objectives are to raise awareness and identify weaknesses in our security practices. Please include details on the target audience, timeline, and specific steps for execution, including [PASTE DATA]. Structure the plan into sections: objectives, methodology, and follow-up actions. If any team members fail the simulation, note their names separately for additional training recommendations."

"I need to summarize the findings from the security audit of [SYSTEM/NETWORK]. This audit was conducted to assess vulnerabilities and ensure compliance with regulations. Here are the findings that need to be included: [PASTE FINDINGS]. Please organize these into a structured report with three sections: strengths, weaknesses, and recommendations. For each section, include at least three bullet points. If any findings lack sufficient detail, note them separately for further investigation."

"I need to create a remediation plan for the vulnerabilities found in [SYSTEM/APP]. The identified vulnerabilities include: [PASTE VULNERABILITIES]. For each vulnerability, suggest specific actions to remediate and provide a timeline for implementation. Format your response as a table with three columns: vulnerability description, remediation action, and timeline. Please include at least [NUMBER] vulnerabilities. If any vulnerability requires external resources, note it separately for further review."

"I am writing a security audit report for [CLIENT/ORGANIZATION] to document our findings and recommendations. The report should include the following sections: executive summary, methodology, findings, recommendations, and conclusion. Use the information gathered during the audit: [PASTE INFORMATION]. Ensure each section is clearly labeled and concise, with a maximum of 300 words per section. If any findings present significant risks, highlight them separately and suggest immediate actions to address them."

"I need to prepare a presentation for stakeholders regarding the findings from our recent security audit. The audit revealed several key issues that need to be addressed: [PASTE FINDINGS]. Please outline the presentation with an introduction, three main findings, and a conclusion that includes at least three actionable recommendations. Each recommendation should be concise, ideally one sentence long. If any finding lacks sufficient evidence or requires further investigation, note it separately for follow-up."

"I need to develop a follow-up checklist to ensure all recommendations from the audit of [SYSTEM/PROCESS] are implemented effectively. The recommendations are based on our recent findings and are crucial for enhancing security compliance. Here are the recommendations: [PASTE RECOMMENDATIONS]. Create a checklist with at least [NUMBER] actionable items, assigning responsibilities to relevant team members. Ensure each action is clear and concise. If any recommendation cannot be assigned immediately, note it separately for later review."

"I need to outline the steps for implementing security improvements for [SYSTEM/PROCESS]. The changes are based on the following recommendations: [PASTE RECOMMENDATIONS]. Create a detailed action plan that includes at least five specific steps, each with a timeline for completion. Format the steps in a numbered list, ensuring clarity and conciseness. If any step requires additional resources or stakeholder involvement, note that separately for follow-up."

"I need to assign responsibilities for the security improvement tasks identified in the audit for [SYSTEM/NETWORK]. This involves ensuring that each task is clearly delegated to the appropriate team members to enhance our security posture. Please create a table that lists the tasks, responsible parties, and due dates. Include at least five tasks, and ensure that all responsible parties are clearly identified. If any task has a due date beyond [SPECIFIED TIME FRAME], note it separately for review."

"I need to create a training plan for staff on the new security protocols for [DEPARTMENT/TEAM]. This training is essential to ensure everyone understands and can effectively implement the updated measures. Please outline the training objectives, format, and a detailed schedule based on these requirements: [PASTE REQUIREMENTS]. Include at least three specific training activities and their durations. If any objectives cannot be met within the proposed timeframe, note those separately and suggest alternatives."

"I need to develop a monitoring strategy for ongoing security compliance for [SYSTEM/PROCESS]. This is essential to ensure that we meet regulatory requirements and protect sensitive data. Based on the following information: [PASTE MONITORING TOOLS], suggest at least five key metrics to track and identify appropriate tools to implement this strategy. Present your recommendations in a bullet-point format. Additionally, if any tool is not compatible with our existing infrastructure, note it separately for further evaluation."

"I need to set up a regular audit schedule for [SYSTEM/PROCESS] to ensure ongoing security compliance and risk management. Based on these considerations: [PASTE CONSIDERATIONS], propose a timeline and frequency for audits. Provide a detailed plan outlining the recommended audit intervals, specifying whether they should be monthly, quarterly, or annually. Ensure that the plan accommodates any necessary adjustments for high-risk periods. If any audits are to be skipped, note the reasons separately."