{"id":"sec-it-advisory-for-staff","audience":"it-security","category":"security","track":"security","technique":"audience","title":"Explain a browser security advisory to all staff","free":false,"task":"Write the staff-wide notice about this browser advisory. Staff are not technical. Open with the one thing they must do and the deadline. Don't use security terms (no CVE, exploit, vulnerability, remote code, zero-day or sandbox), and include only what the advisory and IT notes say. Plain text, under 60 words.","materialLabel":"Vendor advisory and IT notes (attached to your prompt automatically)","material":"BRIGHTLINE BROWSER SECURITY ADVISORY (training example, ID EXAMPLE-2026-31415)\nSeverity: Critical\nSummary: A memory flaw in the page rendering engine of Brightline Browser for Windows and Mac allows remote code execution when a user visits a specially crafted web page. The vendor reports limited exploitation in the wild (zero-day). Mobile versions of Brightline are not affected.\nFix: Brightline build 2611 or later. Managed devices receive the build automatically, but the browser must be fully closed and reopened for the update to apply.\n\nIT notes (Ravi, Nov 6):\n- Our device tool pushed build 2611 to all company laptops this morning.\n- About 60% of laptops still show the old build because people never close the browser.\n- We need everyone to fully quit and reopen Brightline by 5 pm today (Thursday).\n- Someone in the #general channel said everyone should change their passwords because of this. That is not in the advisory and not needed.\n- Phones and tablets are fine.","rules":[{"type":"plainText"},{"type":"maxWords","max":60}],"mistakes":[{"title":"Burying the action","why":"The AI explains the flaw first and the one thing staff must do comes last.","fix":"Say: \"Open with the action and the deadline: quit and reopen Brightline by 5 pm today.\"","checks":["r0"]},{"title":"Copying the advisory's terms","why":"The AI repeats words like zero-day and remote code execution that staff skim past.","fix":"Add: \"Staff aren't technical. No CVE, exploit, vulnerability or zero-day.\"","checks":["r1"]},{"title":"Passing on the rumor","why":"The AI sees the password comment and adds 'change your passwords' to be safe.","fix":"Say: \"Include only what the advisory and IT notes confirm. No password change.\"","checks":["r2"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 60 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 45 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in an all-staff email preview they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Says who it's for","patterns":["staff","non-?technical","employees","everyone"]},{"label":"Leads with the action","patterns":["first","open with","start with","lead with","deadline"]},{"label":"Bans jargon","patterns":["jargon","cve","technical terms","plain (english|language|words)"]},{"label":"Keeps it to the material","patterns":["only (use )?(the )?(facts|what|info|details)","don'?t (invent|make up|guess|add)","not in the","stick to","nothing (else|extra|outside)"]},{"label":"Sets a word limit","patterns":["\\d+\\s*words","word (limit|count)"]}],"hint":"Staff need one action and a deadline, in everyday words. Tell the AI who's reading, what goes first, which terms to avoid, and to skip the rumor.","rubricLabels":["The first sentence tells staff to fully quit and reopen Brightline by 5 pm today (Thursday)","Uses none of these terms: CVE, exploit, vulnerability, remote code, zero-day, sandbox, or the EXAMPLE ID","Does not tell staff to change their passwords, and does not ask staff to do anything on phones or tablets (saying phones and tablets need nothing is fine)"]}