{"id":"comp-control-description-template","audience":"compliance","category":"legal-compliance","track":"legal","level":"beginner","technique":"format","title":"Turn procedure notes into a control description in a set format","free":false,"task":"Write a control description from the notes in the material. Plain text, exactly these labeled lines in this order: Control ID:, Objective:, Owner:, Frequency:, Evidence:, Exception handling:. Each line is one short sentence under 20 words. If the notes do not state something, write Not stated on that line. Do not say the control works or is effective. Under 100 words.","materialLabel":"Walkthrough notes (attached to your prompt automatically)","material":"Notes from Finance Ops walkthrough, Oct 28 (Halden Credit Union)\n\nThe access review (control ID ACC-07) exists so that people who have left the company cannot approve payments in the payment system. Marcus Teo, Finance Ops Lead, runs it on the first business day of each month. He exports the list of users with approval rights, compares it with the leavers list from HR, and removes any leaver's access within 2 business days. He then saves a signed screenshot of the cleaned user list in the folder Access Reviews / 2027.\n\nMarcus says it \"should be monthly\" but the Q2 review was skipped and done together with Q3 in September. He is thinking about asking IT to automate it next year.","rules":[{"type":"maxWords","max":110},{"type":"plainText"}],"mistakes":[{"title":"Inventing exception handling","why":"The AI makes up an escalation process.","fix":"Say: \"If the notes don't state it, write Not stated.\"","checks":["r2"]},{"title":"Missing facts","why":"The AI blurs owner, timing or evidence.","fix":"Say: \"Use the owner, timing and evidence named in the notes.\"","checks":["r1"]},{"title":"Own headings","why":"The AI uses its own headings or a table.","fix":"Say: \"Exactly these six labels in this order.\"","checks":["r0"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for a total word limit and it often lands over it.","fix":"Cap each part instead, for example: \"each line under 15 words.\"","checks":["maxWords"]},{"title":"Markdown","why":"The AI bolds words or adds headings.","fix":"Say: \"Plain text, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Six labels","patterns":["control id:","objective:","owner:","frequency:","evidence:","exception handling:"]},{"label":"Fallback for gaps","patterns":["not stated"]},{"label":"One sentence per line","patterns":["one (short )?sentence","under \\d+ words"]},{"label":"No effectiveness claim","patterns":["effective","works"]},{"label":"Plain text","patterns":["plain text"]}],"hint":"List the six labels, the fallback phrase for missing facts, and ban claims about effectiveness.","mission":"Document the access review as a control description.","musts":["Six fixed labels","Not stated if missing","No effectiveness claims"],"rubricLabels":["Has exactly the six labels Control ID:, Objective:, Owner:, Frequency:, Evidence:, Exception handling: in that order, each on its own line","States ACC-07, Marcus Teo, monthly (first business day of the month), and the signed screenshot saved in Access Reviews / 2027","Exception handling: is exactly Not stated (or says Not stated), and no line says the control works, is effective or passed"]}