{"id":"risk-datamap-owner-questions","audience":"compliance","category":"legal-compliance","track":"legal","technique":"constraints","level":"beginner","title":"Write questions for system owners about gaps in a data map","free":false,"task":"Write a prompt for follow-up questions to system owners, based only on what is missing from the notes. Plain text, at most 5 bullets starting with \"- \", each beginning with the system name and a colon, ending with a question mark, under 18 words. Ask only about gaps; skip anything already answered. No intro or closing.","materialLabel":"Your material (attached to your prompt automatically)","material":"DATA MAP DRAFT - Harbor Mutual Club\nPayroll tool: employee names, bank details. Purpose: pay staff. Retention: 6 years. Hosted by vendor PayWave. Backups: stored by PayWave.\nVisitor log: visitor names and car plates. Purpose: building security. Retention: not recorded. Hosted on site. Backups: not recorded.\nEvent booking site: member names, emails. Purpose: book events. Retention: not recorded. Hosted by vendor name not recorded. Backups: not recorded.\nMember survey tool: anonymous responses, no personal data collected according to the owner. Retention: 12 months. Hosted by vendor FormNest.","rules":[{"type":"plainText"},{"type":"maxBullets","max":5},{"type":"maxWords","max":90}],"promptHints":[{"label":"Gaps only","patterns":["not recorded","missing","gaps?"]},{"label":"Line format","patterns":["system name","colon","start"]},{"label":"Bullet limit","patterns":["at most 5","5 bullets"]},{"label":"Skip answered","patterns":["skip","already answered"]},{"label":"Plain text","patterns":["plain","no markdown"]}],"mistakes":[{"title":"Asking about everything","why":"AI asks about payroll and survey too.","fix":"Say: \"Ask only about items marked not recorded; skip answered ones.\"","checks":["r0"]},{"title":"Missing system names","why":"AI writes generic questions.","fix":"Say: \"Each bullet starts with the system name and a colon.\"","checks":["r1"]},{"title":"Too many bullets","why":"AI asks one question per field.","fix":"Say: \"At most 5 bullets.\"","checks":["r2"]},{"title":"Getting markdown back","why":"AI adds bold, headings and bullets by default, which show up as stray symbols when pasted.","fix":"Say \"plain text, no bold, no headings, no asterisks\".","checks":["plainText"]},{"title":"Too many bullets","why":"AI lists everything it finds instead of stopping at your limit.","fix":"Say \"at most N bullets, nothing else\" and name the limit.","checks":["maxBullets"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting and usually runs long, so a vague \"keep it short\" lands over the limit.","fix":"Cap each part instead of the total, for example \"each line under 15 words\".","checks":["maxWords"]}],"hint":"Say to ask only about not-recorded items, with the system name first.","mission":"Ask owners only about what is missing.","musts":["Gaps only","System name first","Question marks"],"rubricLabels":["Every bullet begins with a system name followed by a colon and ends with a question mark","The questions cover only gaps: visitor log retention and backups, and event booking site retention, vendor name and backups","No question is asked about the payroll tool or the member survey tool, and there is no intro or closing"]}