{"id":"sec-mgr-security-key-cost-decision","audience":"managers","category":"security","track":"security","technique":"format","title":"Compare two sign-in security options with the math shown","free":false,"task":"Your director wants a recommendation on sign-in security for your 40-person team. Write exactly 3 numbered lines: Option A cost with the math shown, Option B cost with the math shown, then 'Recommendation:' using the director's stated priority. Use only the numbers in the quotes. Plain text, under 90 words.","materialLabel":"Vendor quotes and your director's email (attached to your prompt automatically)","material":"Director's email (Nov 4): \"I need a pick by Friday. My priority this year is blocking fake login pages, since that's how we got hit twice. Cost matters, but it's second. Keep it short.\"\n\nOption A - Authenticator app with number matching (from IT):\n- License: $3 per user per month\n- Setup: IT time, no extra cost\n- Note from IT: stops most password-only attacks, but a fake login page can still trick someone into approving.\n\nOption B - Hardware security keys:\n- Keys: $50 each, 2 per person (one backup), one-time purchase\n- No monthly fee\n- Note from IT: keys only work on the real website address, so fake login pages can't use them.\n\nOther details:\n- Team size: 40 people.\n- Compare costs over 1 year.\n- A vendor salesperson said keys \"pay for themselves in 3 months\". IT didn't confirm that.\n- We'd also need 2 hours of training either way.","rules":[{"type":"numberedItems","count":3},{"type":"plainText"},{"type":"maxWords","max":90}],"mistakes":[{"title":"Hiding the math","why":"The AI gives totals with no working, so the director can't check them.","fix":"Ask: \"Show the math on each line, like 40 x $3 x 12.\"","checks":["r0","r1"]},{"title":"Picking on cost alone","why":"Without the director's priority, the AI recommends the cheaper option.","fix":"Say: \"Recommend based on the director's priority: blocking fake login pages first, cost second.\"","checks":["r2"]},{"title":"Repeating sales claims","why":"The AI includes the 'pay for themselves' line as a fact.","fix":"Add: \"Use only the numbers in the quotes, not the salesperson's claim.\"","checks":["r2"]},{"title":"A long memo","why":"The AI writes pros and cons tables with headings.","fix":"Be exact: \"Exactly 3 numbered lines.\"","checks":["numberedItems","maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in an email they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Asks for the math","patterns":["math","show (the )?(work|calc)","x \\$|\\* \\$","1 year|12 months"]},{"label":"Gives the priority","patterns":["priority","fake login","phishing","cost (is )?second"]},{"label":"Ignores sales claims","patterns":["salesperson","only the numbers","not confirmed","ignore"]},{"label":"Says exactly how many","patterns":["\\b3\\b.{0,25}(line|item)","exactly (3|three)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"A director trusts numbers they can check. Ask the AI to show the math on each line and to decide using the director's stated priority, not cost alone.","rubricLabels":["The Option A line shows the math for 1 year (40 x $3 x 12 = $1,440)","The Option B line shows the math (40 x 2 x $50 = $4,000)","The Recommendation line picks Option B because the director's top priority is blocking fake login pages, and does not repeat the salesperson's 'pay for themselves' claim"]}