{"id":"sec-mgr-ai-notetaker-vendor-questions","audience":"managers","category":"security","track":"security","technique":"context","title":"Ask a vendor only the security questions their FAQ skips","free":false,"task":"Your team wants an AI meeting note-taker. Security's checklist has 5 questions; the vendor's FAQ already answers some. Write exactly the questions the FAQ doesn't answer, numbered, each starting with its checklist number like '(C2)'. Don't ask what the FAQ already covers. Plain text, under 70 words.","materialLabel":"Security checklist and vendor FAQ (attached to your prompt automatically)","material":"Security's checklist for AI meeting tools:\nC1. Where are recordings and transcripts stored, and in which country?\nC2. Is our data used to train the vendor's AI models?\nC3. Can we set automatic deletion after a set number of days?\nC4. Does it support our company sign-in (single sign-on)?\nC5. Who at the vendor can access our transcripts, and is that access logged?\n\nVendor FAQ - NoteNest (fictional):\n- \"All recordings and transcripts are stored in US data centers.\"\n- \"We never use customer data to train our models. This is in our contract.\"\n- \"NoteNest supports sign-in with personal email accounts, plus single sign-on on the Business plan.\"\n- \"Our team is passionate about privacy!\"\n- \"Pricing: $12 per user per month, Business plan $20.\"\n\nNotes: we'd be on the Business plan. The team wants it for client calls.","rules":[{"type":"numberedItems","count":2},{"type":"plainText"},{"type":"maxWords","max":70}],"mistakes":[{"title":"Asking everything","why":"The AI copies all 5 checklist questions, which wastes the vendor's time and yours.","fix":"Say: \"Only questions the FAQ doesn't answer.\"","checks":["r1","numberedItems"]},{"title":"Counting fluff as an answer","why":"The AI treats 'passionate about privacy' as covering access controls.","fix":"Add: \"Marketing lines don't count as answers.\"","checks":["r2"]},{"title":"No checklist numbers","why":"Security can't match your questions to their checklist.","fix":"Ask: \"Start each question with its checklist number, like (C3).\"","checks":["r0"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 70 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 50 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in an email to the vendor they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Skips answered questions","patterns":["faq","already answer","not answer","skip"]},{"label":"Asks for checklist numbers","patterns":["\\(c\\d\\)","checklist number","c3"]},{"label":"Ignores marketing lines","patterns":["marketing","passionate","fluff","don'?t count"]},{"label":"Sets a word limit","patterns":["\\d+\\s*words","word (limit|count)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Good vendor questions fill real gaps. Ask the AI to compare the checklist with the FAQ and send only what's still open, with checklist numbers.","rubricLabels":["Asks exactly two questions: one starting '(C3)' about automatic deletion after a set number of days, and one starting '(C5)' about who at the vendor can access transcripts and whether access is logged","Does not ask about storage location (C1), model training (C2) or single sign-on (C4), which the FAQ answers","Each question ends with a question mark and does not treat 'passionate about privacy' as an answer"]}