Library › Cybersecurity AI › Small business owners

Write a phishing report process for a small office

  • For Small business owners
  • You practice Giving the right context
  • Time about 5 minutes

About this exercise

You run a 12-person accounting office with no IT department. Write the phishing report process for the staff binder: exactly 4 numbered steps, each under 15 words, using only the tools and people in your notes. Step 1 is what to do before anything else. End with one line: 'If you already clicked: ...'. Plain text, under 90 words.

Common mistakes when you ask AI for this

  • A corporate template. The AI writes a policy for a company with a security team and an incident hotline you don't have. Try: Say: "12-person office, no IT department. Use only the tools and people in my notes."
  • Telling people to forward. Forwarding is the AI's default advice, and it caused your last incident. Try: Add: "Use the Report phishing button. Never forward."
  • Forgetting the already-clicked case. The AI covers spotting phishing but not what to do after a click. Try: Ask: "End with: If you already clicked: call Carla at (555) 012-7781."
  • A long policy. The AI writes sections with definitions and examples. Try: Be exact: "Exactly 4 numbered steps, each under 12 words."
  • Letting markdown in. AI adds bold and headings by default, and in a printed binder they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."

What a strong prompt includes

  • Describes the office
  • Uses your tools
  • Covers already clicked
  • Says exactly how many
  • Asks for plain text

Practice this now ↑

Related exercises