Resources / AI prompt library
Prompts for the backup work nobody wants to start.
Fill in a few blanks and get a first draft of your SSP section, POA&M, tabletop exercise or board briefing from the AI tool you already use.
- Works in
- ChatGPT
- Claude
- Copilot
- Gemini
- Cost
- Free. No sign-up, nothing saved.
Describe your environment, never paste it. Keep CUI, personal data, hostnames, IP addresses and credentials out of public AI tools. If your organization has approved an AI tool for internal data, use that one.
Compliance
SSP language, gap checks, POA&Ms and the questionnaires customers and insurers send.
6 prompts
Draft the backup section of your System Security Plan
You need SSP language for NIST SP 800-171 requirement 3.8.9 and don't want to start from a blank page.
6 blanks to fillFind gaps against the 800-171 recovery requirements
Before a CMMC assessment, you want a quick read on which backup and recovery requirements you can't yet show evidence for.
2 blanks to fillWrite a POA&M entry for a backup gap
You've found a gap and need a Plan of Action and Milestones entry an assessor will accept.
6 blanks to fillCheck whether your cloud backup provider can hold CUI
Your backups include CUI and go to a cloud service, and you need to know whether that service meets DFARS 7012.
3 blanks to fillPrepare for your cyber insurance renewal
Your renewal questionnaire asks about backups, and a weak answer can raise your premium or put a claim at risk.
5 blanks to fillAnswer a customer's security questionnaire about backups
A customer or prime sent a security questionnaire and the backup and recovery section is yours to fill in.
2 blanks to fill
Commvault
For teams running Commvault: failed jobs, hardening, CommServe recovery, retention, upgrades and assessment evidence.
8 prompts
Find why a Commvault backup job failed
A Commvault job failed or finished with errors and the failure reason doesn't tell you what to fix.
6 blanks to fillHarden your Commvault environment against ransomware
Attackers go after the backup system first, and you want to know how well yours would hold up.
3 blanks to fillPlan disaster recovery for the CommServe
Every restore depends on the CommServe, and you need a plan for getting it back first.
5 blanks to fillSet Commvault retention to match your records rules
You need retention settings that meet your records and compliance rules without paying to keep everything forever.
5 blanks to fillPlan a Commvault upgrade
You're moving to a newer Commvault release and want a change plan that won't leave you without backups.
6 blanks to fillWrite a restore runbook for a critical system in Commvault
The person who knows how to restore your most important system shouldn't be the only one who can.
6 blanks to fillCollect CMMC evidence from Commvault
Your assessment is coming up and you need to show, not say, that your backups meet the 800-171 requirements.
3 blanks to fillTurn Commvault reports into a leadership update
Your monthly backup numbers mean something to you and nothing to the people who fund them.
9 blanks to fill
Planning
Backup design, recovery targets, restore tests and plan reviews.
6 prompts
Check your backups against the 3-2-1-1-0 rule
You want to know whether your backup copies would survive ransomware that goes after backups first.
6 blanks to fillSet RTO and RPO tiers for your systems
Leadership wants recovery targets and you need a defensible way to set them system by system.
1 blank to fillPlan and record a restore test
You need to prove backups actually restore, for yourself and for an assessor or insurer, not just that the jobs succeeded.
4 blanks to fillReview your disaster recovery plan like an auditor
You have a DR plan, but it hasn't been tested or read critically in a while.
1 blank to fillWork out what Microsoft 365 doesn't back up for you
Someone asked "doesn't Microsoft back that up?" and you need a clear answer for your tenant.
5 blanks to fillCheck whether your AI data can be recovered
Your team uses AI tools, vector databases or agents, and no one has asked what happens if that data is lost or poisoned.
1 blank to fill
Incident response
Exercises, checklists and summaries for when it goes wrong.
3 prompts
Run a ransomware tabletop exercise
You need to test your incident response plan (800-171 requirement 3.6.3) without a consultant or a full day.
4 blanks to fillBuild a first-hour checklist for a suspected attack
You want a one-page checklist the on-call person can follow before the experts arrive.
6 blanks to fillTurn incident notes into a leadership summary
Your team's notes are a timeline of technical details and leadership needs a page they can act on.
1 blank to fill
Leadership
Briefings and business cases that get a decision.
2 prompts
Explain recovery risk to your board in five minutes
You have a short slot at a board or leadership meeting and need a decision, not just attention.
6 blanks to fillWrite the business case for a backup upgrade
You need budget for better backup or recovery and the request has to survive a CFO's questions.
5 blanks to fill
Buying
Vendor questions, RFP requirements and the fastest way to purchase.
3 prompts
Questions to ask a backup vendor
You're comparing backup or recovery vendors and want to get past the sales deck.
2 blanks to fillWrite the backup requirements for an RFP
You're writing a solicitation and need backup and recovery requirements that are specific, testable and fair to every bidder.
4 blanks to fillFind the fastest way to buy
You're in the public sector and need to know which contract vehicle gets you to a purchase order fastest.
4 blanks to fill
Want a person to check the answer?
AI gets you a first draft. A KELYN engineer can tell you whether it would hold up in an assessment or a real recovery.