{"id":"sales-it-security-faq-unknown-labels","audience":"sales","category":"sales-work","technique":"grounding","track":"sales","level":"intermediate","title":"Answer buyer IT questions and mark what we don't know","free":false,"task":"Write answers to the buyer's 4 IT questions in the form \"Q1: Yes/No/Unknown - answer in under 15 words\". Use Unknown when the security fact sheet is silent; never infer. Add a final line \"Ask security team:\" listing the question numbers marked Unknown. Plain text, under 110 words.","materialLabel":"Buyer questions and security fact sheet (attached to your prompt automatically)","material":"BUYER QUESTIONS (IT manager at Calloway Schools):\nQ1. Is student data encrypted in transit?\nQ2. Do you offer a data-processing agreement (DPA)?\nQ3. Can data be deleted on request within 30 days?\nQ4. Do you support Google sign-in (SSO)?\n\nSECURITY FACT SHEET (reviewed Oct 2026):\n- All traffic uses TLS 1.2 or higher.\n- A standard DPA is available on request through the sales team.\n- Data retention: customer data is retained for the contract term plus 90 days; deletion requests are handled by support.\n- Sign-in: email and password; SSO is on the roadmap with no date.\n- Penetration test: completed Feb 2026.\n\nNOTE: a sales manager said in chat, \"I'm pretty sure we can delete within 30 days if they ask.\" That is not in the fact sheet. Do not treat it as confirmed.","rules":[{"type":"plainText"},{"type":"maxWords","max":110}],"mistakes":[{"title":"Inferring from chat","why":"The AI answers Yes to the 30-day deletion from the manager's comment.","fix":"Add: \"Use Unknown when the fact sheet is silent; never infer.\"","checks":["r2"]},{"title":"Overstating SSO","why":"The AI says SSO is coming soon as if available.","fix":"Add: \"Roadmap items are No for now.\"","checks":["r1"]},{"title":"No follow-up line","why":"The AI forgets the Ask security team line.","fix":"Add: \"End with Ask security team: and the Unknown numbers.\"","checks":["r0"]},{"title":"Long answers","why":"The AI writes paragraphs.","fix":"Add: \"Each answer under 15 words, plain text.\"","checks":["plainText","maxWords"]}],"promptHints":[{"label":"Sets the answer format","patterns":["q1:","yes/no/unknown","unknown"]},{"label":"Forbids inference","patterns":["never infer","silent","don.t (guess|infer)"]},{"label":"Adds the follow-up line","patterns":["ask security team"]},{"label":"Limits answer length","patterns":["under 15","\\d+\\s*words"]},{"label":"Plain text","patterns":["plain text","no bold"]}],"hint":"Show the answer format, define Unknown and name the closing line.","rubricLabels":["Has four lines labeled Q1 to Q4 in the form Q#: Yes/No/Unknown - answer, followed by a final line starting \"Ask security team:\"","Q1 is Yes (TLS 1.2 or higher), Q2 is Yes (DPA available on request), and Q4 is No (SSO not available, roadmap only)","Q3 is Unknown (the sheet gives retention for the term plus 90 days but no 30-day deletion commitment), the final line lists 3, and the sales manager's chat comment is not used"]}