ChatGPT isn’t just a smarter Google. It’s a context-aware assistant that can help you analyze, synthesize, and generate ideas, content, and strategy — if you give it clarity on your intent.
Start thinking in conversations and collaboration, not queries.
Use this to structure your prompts.
- Role — Who should ChatGPT pretend to be?
- Task — What do you want it to do?
- Audience — Who is this for?
- Format — How should the output be delivered?
Example:
"You are a senior security researcher. I want you to help me compare two endpoint tools for an internal risk review. The output should be a 1-page executive summary."
Use this structure to craft prompts quickly:
Act as a [ROLE].
You will help with [TASK/PROBLEM].
The audience is [AUDIENCE].
Please provide the output in [FORMAT].
Here is the context: [CONTEXT/INPUT if applicable].
1. Technical Tool Comparison
Act as a Security Architect.
I'm comparing Rapid7 vs SentinelOne for a client with 500 endpoints.
Help me build a decision matrix of pros/cons, price, MITRE ATT&CK coverage, and agent impact.
Audience is internal GRC team.
Format: table + 3-paragraph summary.
2. Process Documentation You are a compliance writer.
Help me write a draft procedure for vulnerability scanning using InsightVM.
The audience is junior analysts.
Format: SOP outline with bullet steps and rationale.
3. Threat Analysis Summarizer Act as a security researcher.
Summarize the key takeaways from this Rapid7 whitepaper on RCE in Apache Struts.
Audience is DevSecOps leadership.
Format: 5 bullets + 1 paragraph takeaway.
- Add
"Be concise"or"Write like a peer"to reduce fluff. - Paste in a sample if you want it to match tone or structure.
- For step-by-step thinking, say: "Let’s work through this step by step."
| Task | Prompt Idea |
|---|---|
| Threat Model | "Help me brainstorm threat vectors for a SaaS billing platform using STRIDE." |
| Vendor Review | "Act as a TPRM analyst. Summarize key red flags in this SOC 2 report." |
| Process Design | "Help me design a lightweight exception request process aligned to NIST CSF." |
| Meeting Prep | "Draft 3 talking points for my exec check-in on tool sprawl and overlap." |
| Policy Draft | "Write a baseline policy statement for endpoint detection and response tools." |
Treat ChatGPT like a smart intern or co-author:
- Be clear
- Give examples
- Iterate interactively
- Don’t expect magic on the first try
You’ll get the most out of it when you work with it, not just ask it.