{"id":"sec-hr-new-hire-day-one-security","audience":"hr","category":"security","track":"security","technique":"grounding","title":"Make a new hire's first-week security checklist","free":false,"task":"Write the security part of the new hire welcome sheet from IT's notes: exactly 5 numbered items, each ending with '(by day 1)' or '(by Friday)' as IT specifies. Use only current steps (some old ones were retired). No jargon like MFA or SSO. Plain text, under 90 words.","materialLabel":"IT's onboarding notes (attached to your prompt automatically)","material":"IT onboarding notes - security (updated Oct 2026, Coral Bay Health)\n\nDay 1 (before doing any work):\n- Set up the Authenticator app for sign-in approvals. IT desk will help at the welcome session at 10 am.\n- Change the temporary password to a passphrase of at least 14 characters.\n- Sign the acceptable use policy in the HR portal.\n\nFirst week (by Friday):\n- Finish the 20-minute security awareness course in the learning portal.\n- Save the help desk number (ext. 4357) in your phone.\n\nRetired (do not include):\n- Picking up a VPN token from IT. The VPN now uses the Authenticator app.\n- Setting security questions. Replaced by the Authenticator app.\n\nOptional (not required): join the #security-tips channel.\n\nNotes from HR: last month two new hires missed the Day 1 items because the sheet listed them under \"first week\".","rules":[{"type":"numberedItems","count":5},{"type":"plainText"},{"type":"maxWords","max":90}],"mistakes":[{"title":"Including retired steps","why":"The AI lists the VPN token and security questions because they're in the notes.","fix":"Say: \"Use only current steps. Skip anything marked retired or optional.\"","checks":["r2"]},{"title":"Mixing up the deadlines","why":"The AI puts everything under 'first week', which is the mistake HR saw last month.","fix":"Ask: \"End each item with (by day 1) or (by Friday) as IT specifies.\"","checks":["r0","r1"]},{"title":"Using IT terms","why":"The AI writes 'enroll in MFA', which new hires don't understand.","fix":"Add: \"No jargon: say Authenticator app, not MFA.\"","checks":["r2"]},{"title":"Too much detail","why":"The AI writes a paragraph per step.","fix":"Be exact: \"Exactly 5 numbered items, each under 14 words.\"","checks":["numberedItems","maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in the welcome sheet they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Asks for deadlines","patterns":["by day 1","by friday","deadline","when"]},{"label":"Drops retired steps","patterns":["retired","current","skip","optional"]},{"label":"Bans jargon","patterns":["jargon","no mfa","plain (english|language|words)"]},{"label":"Says exactly how many","patterns":["\\b5\\b.{0,25}(item|line|step)","exactly (5|five)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"New hires do what the sheet says, in the order it says. Tell the AI which steps are current and give each one its deadline tag.","rubricLabels":["The Authenticator app setup, the 14-character passphrase, and signing the acceptable use policy each end with '(by day 1)'","The awareness course and saving help desk ext. 4357 each end with '(by Friday)'","Does not include the VPN token, security questions, or the optional channel, and uses no jargon (MFA, SSO, 2FA)"]}