{"id":"sec-sb-cyber-insurance-answers","audience":"small-business","category":"security","track":"security","technique":"grounding","title":"Answer a cyber insurance form honestly from your notes","free":false,"task":"Your insurer's renewal form has 5 security questions. Answer each from your notes only, as numbered lines like 'Q1: Yes - evidence', using exactly one of Yes, No or Partly. Partly means it's true for some systems but not all. Don't round up: a wrong Yes can void a claim. Plain text, under 100 words.","materialLabel":"Insurer questions and your notes (attached to your prompt automatically)","material":"Insurer renewal form - Security section (Pinecrest Landscaping, 9 staff)\nQ1. Is multi-factor authentication required for email and all financial systems?\nQ2. Do you keep at least one backup copy offline or disconnected from your network?\nQ3. Do all computers run antivirus or endpoint protection that updates automatically?\nQ4. Have all employees completed security awareness training in the last 12 months?\nQ5. Do you have a written plan for responding to a cyber incident?\n\nMy notes (owner, Rosa Pinecrest):\n- Email: everyone uses the authenticator app to sign in, set up last January.\n- Accounting software (BookRight): just a password. The bank portal does require a texted code.\n- Backups: the office PC backs up every night to a USB drive that stays plugged in. Our bookkeeper also takes a copy home on a second drive every Friday and brings it back Monday.\n- Antivirus: the built-in Windows protection is on all 6 office PCs, automatic updates on. The 2 field tablets have nothing extra.\n- Training: 7 of 9 staff did the free online course in March. The two seasonal hires started in October and haven't done it.\n- Incident plan: I have a sticky note with the IT guy's number. Nothing written beyond that.","rules":[{"type":"numberedItems","count":5},{"type":"plainText"},{"type":"maxWords","max":100}],"mistakes":[{"title":"Rounding up","why":"The AI wants to be helpful and answers Yes when most systems are covered.","fix":"Say: \"Partly means true for some systems but not all. Don't round up.\"","checks":["r1"]},{"title":"No fixed answers","why":"The AI writes 'Mostly yes, but...', which doesn't fit the form.","fix":"Give the choices: \"Start each line Q1: Yes, No or Partly.\"","checks":["r0","numberedItems"]},{"title":"Answers without proof","why":"If the insurer asks later, you need to show why you said it.","fix":"Ask: \"Add the evidence from my notes after each answer.\"","checks":["r2"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 100 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 75 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in the form they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Gives the answer choices","patterns":["yes, no","partly","yes/no"]},{"label":"Defines Partly","patterns":["some (systems|but not)","partly (means|=)","not all"]},{"label":"Says not to round up","patterns":["round up","honest","don'?t (assume|guess)","only (from|what)"]},{"label":"Says exactly how many","patterns":["\\b5\\b.{0,25}(line|answer|question)","exactly (5|five)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Insurance answers have to be exactly true. Give the AI fixed answer choices, define 'Partly', and ask it to show the evidence for each.","rubricLabels":["Each line starts 'Q1:' to 'Q5:' followed by exactly one of Yes, No or Partly","The answers are Q1 Partly (no MFA on BookRight), Q2 Yes (Friday copy taken home is disconnected), Q3 Partly (tablets have nothing extra), Q4 Partly or No (2 seasonal hires untrained), Q5 No (only a sticky note)","Each answer gives evidence from the notes and nothing is rounded up to Yes without support"]}