Turn a scan report into a ranked fix list with owners

About this exercise

Turn this scan summary into the weekly fix list. Leave out anything marked accepted risk. Sort by your team's rule: internet-facing AND known exploited first, then any other known exploited, then the rest by CVSS score, highest first. Write exactly 5 numbered lines like '1. host - fix - Owner: name', using the owner table. Plain text, under 100 words.

Common mistakes when you ask AI for this

• Sorting by score alone. The AI ranks by CVSS, so an internal flaw beats one attackers are already using. Try: Give the rule: "Internet-facing and known exploited first, then known exploited, then CVSS highest first."
• Keeping accepted risks. The AI lists everything in the report, including the FTP server the CISO signed off on. Try: Add: "Leave out anything marked accepted risk."
• No owners. The AI writes a fix list nobody owns, so nothing gets assigned. Try: Say: "End each line with Owner: name from the owner table."
• Trusting the AI to count words. AI is bad at counting. Ask for "under 100 words" and it often lands well over. Try: Ask for less than the limit and cap each line: "each line under 15 words, under 75 words total."
• Letting markdown in. AI adds bold and headings by default, and in the team's tracker they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."

What a strong prompt includes

• Gives the sort rule
• Drops accepted risks
• Asks for owners
• Says exactly how many
• Asks for plain text

Practice this now ↑

Related exercises

• Accept the buyer's counteroffer on three stated conditions (Sales AI · Sales and customer success)
• Accrue goods received but not invoiced at PO price (Finance AI · Accountants)
• Add dark mode by overriding your existing CSS variables (Coding AI · Software developers)
• Add input checks to your number guessing game (Coding AI · High school students)
• Add labels to a signup form without rewriting the page (Coding AI · High school students)