{"id":"sec-it-vendor-breach-impact","audience":"it-security","category":"security","track":"security","technique":"grounding","title":"Decide if a vendor's breach notice affects you","free":false,"task":"A vendor sent a breach notice. Check it against your data inventory and write exactly 3 lines starting 'Affected:' (Yes, No or Unclear), 'Our data involved:' and 'Action:'. Base it only on the notice and the inventory, not on worst-case guesses. Plain text, under 80 words.","materialLabel":"Breach notice and your data inventory (attached to your prompt automatically)","material":"Security notice from Formly Inc. (fictional), Nov 5, 2026\n\"On Oct 28, an unauthorized party accessed a database used by our Formly Surveys product. Exposed data: survey responses and respondent email addresses collected between Jan 2025 and Oct 2026. Formly Payments and Formly Signatures were not affected. Passwords were not exposed. We have contained the issue. Customers do not need to take action, but may wish to inform respondents.\"\n\nOur data inventory (Harborline Freight):\n- Formly Signatures: used by Legal for contract signing since 2024. Data: client names, signatures.\n- Formly Surveys: used by HR for the 2025 employee engagement survey (March 2025). Data: survey answers, employee work emails. 214 responses.\n- Formly Payments: not used.\n\nNote from HR: \"The survey was anonymous, but Formly still stored work emails to stop duplicate responses.\"\n\nA colleague's take: \"Formly got hacked, so assume everything including signed contracts is out there.\"","rules":[{"type":"plainText"},{"type":"maxWords","max":80}],"mistakes":[{"title":"Worst-case thinking","why":"The AI follows the colleague's take and says contracts may be exposed.","fix":"Say: \"Base it only on the notice and our inventory.\"","checks":["r2"]},{"title":"Missing your data","why":"Without matching against the inventory, the AI says 'possibly affected' and stops.","fix":"Ask: \"Name which of our uses and data are involved.\"","checks":["r1"]},{"title":"No clear answer","why":"The AI writes paragraphs that never say yes or no.","fix":"Give the shape: \"Affected: Yes, No or Unclear, then Our data involved:, then Action:\"","checks":["r0"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 80 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 60 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in the ticket they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Uses your inventory","patterns":["inventory","our data","what we use"]},{"label":"Asks for a clear answer","patterns":["affected:","yes, no","unclear"]},{"label":"Avoids worst-case guesses","patterns":["worst","guess","only (the )?(notice|facts)","colleague"]},{"label":"Sets a word limit","patterns":["\\d+\\s*words","word (limit|count)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Breach notices name specific products and data. Ask the AI to match them against your inventory and give a clear answer, not a worst case.","rubricLabels":["Exactly 3 lines starting 'Affected:', 'Our data involved:' and 'Action:', and Affected is Yes","Our data involved names the 2025 HR engagement survey on Formly Surveys (survey answers and employee work emails, 214 responses) and says Formly Signatures data was not affected","Action is about informing the affected employees (and/or HR and Legal), and the answer does not treat signed contracts as exposed"]}