Run Security Assessments

Use a structured, evidence-aware workflow to run security assessments, surface missing context and finish with prioritized next actions.

prompt.structure 4 blocks

Prompt workflow

Prompt structure

01 Scope
Define exposure, obligations and tolerance
02 Assess
Identify scenarios and rate materiality
03 Control
Select proportionate safeguards and owners
04 Respond
Set triggers, contingencies and monitoring

Output Risk register, controls and contingency plan

Use this prompt when

A business decision could create material downside.
Existing controls have not been reviewed systematically.
A contingency or escalation plan is missing.
You need risks ranked without pretending uncertainty is precision.

Information to provide

The activity, decision, asset or obligation being assessed
Potential threats, affected stakeholders and exposure
Existing controls, insurance, contracts and safeguards
Risk tolerance, regulatory context and escalation thresholds
Available evidence, incident history and unresolved unknowns

What the prompt produces

A prioritized risk register with evidence notes
Likelihood, impact and detectability assessments
Preventive, detective and corrective controls
Contingencies, owners, triggers and monitoring cadence

Fill it. Run it.

business-conduct-security-assessments.prompt

Variables 0 / 4

IDEAFORGELABS EXECUTION STANDARD

- Treat every bracketed field as a prompt placeholder. Use the value supplied for it consistently throughout the response.
- If a required placeholder or critical fact is missing, ask only the focused questions needed before producing the final deliverable.
- Do not invent facts, figures, credentials, sources, policies, customer evidence or business results.
- Clearly label assumptions, estimates, unresolved questions and anything that needs verification.
- Follow every task-specific phase, requirement, count, format and deliverable below. Do not replace them with a generic answer.
- Prefer recommendations and implementation steps that a solo operator or small team can realistically execute.
- Flag legal, financial, employment, privacy, security or safety decisions that require qualified review.

TASK-SPECIFIC PROMPT

Adopt the role of an expert security analyst tasked with conducting a comprehensive security assessment. Your primary objective is to evaluate risk management processes and identify potential vulnerabilities in a structured, analytical format. Work through the task carefully and systematically. To accomplish this, you should:

1. Analyze the current risk management processes
2. Identify potential security threats and vulnerabilities
3. Assess the likelihood and impact of each identified risk
4. Develop appropriate mitigation strategies
5. Organize your findings using dependency grammar framework

Create a detailed security assessment report that enhances the organization's overall risk management and security posture.

#INFORMATION ABOUT ME:
My business name: [INSERT BUSINESS NAME]
My industry: [INSERT INDUSTRY]
My assessment areas: [INSERT ASSESSMENT AREAS]
My number of columns: [INSERT NUMBER]

OUTPUT STANDARD: Present your output in a markdown table format with the following columns: Assessment Areas, Potential Risks, Likelihood, Impact, and Mitigation Strategies. Ensure each row logically follows from the previous using dependency grammar principles.

How to use the prompt

Add the real context
Provide the activity, decision, asset or obligation being assessed and replace broad statements with facts.
Fill the important gaps
Answer the prompt's focused questions instead of allowing it to guess.
Review the working analysis
Correct false assumptions and check calculations, claims and constraints.
Choose the next actions
Select the recommendations that fit your capacity, risk tolerance and deadline.
Measure and refine
Track the suggested indicators, then rerun the prompt when new evidence appears.

Run Security Assessments FAQ

What does the Run Security Assessments prompt do?

It helps you run security assessments through a structured workflow and produces risk register, controls and contingency plan.

What information should I provide?

Start with the activity, decision, asset or obligation being assessed, potential threats, affected stakeholders and exposure, existing controls, insurance, contracts and safeguards. Add constraints and examples for a more specific result.

Which AI tools work with this prompt?

The prompt works with ChatGPT, Claude, Gemini, Grok and other capable conversational models that can follow a multi-step brief.

Can I rely on the output without reviewing it?

No. Verify factual claims, calculations and recommendations before acting, especially for regulated, legal, financial or people-related decisions.