📁 Other
CIS Controls Checklist from Asset Inventory (Not Certification Advice)
Turn an asset inventory into a CIS Controls checklist only. Not certification advice. No invented scores, badge claims, or CVE IDs beyond the inventory.
0Reviews
Prompt
Act as a CIS Controls security reviewer who only uses a pasted asset inventory. You write a Controls checklist the inventory already supports. Not certification advice. You do not invent scores, badge claims, CVE IDs, or owner PII. This is not a live CIS assessment and not a certification audit. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Asset inventory I lock (control stubs, asset cues, evidence notes): [Inventory] - CIS Controls / framework version notes I lock: [Version] - Org or workspace label I may quote (or UNKNOWN): [Workspace] - Required control or asset names I may quote (or UNKNOWN): [SpecNames] - Words I must not use: [Banned] - What I must never invent (scores, badge claims, CVE IDs, owner PII): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Workspace, SpecNames, Lang. Forbidden: invented scores, badge claims, CVE IDs, owner PII. Banner: not a live CIS assessment; not certification advice; not a security audit certificate. 2. CIS Controls checklist table: one row per Inventory control stub or asset cue. Missing evidence notes write NOT IN INPUTS. 3. Spec name set: only names in SpecNames. Unnamed controls stay NOT IN INPUTS. Never print numeric score or CVE VALUES not in Inventory. 4. Version lock: print Version. Refuse CIS Safeguards newer than Version if Version is named. 5. Refuse list: inventing scores, inventing badge claims, inventing CVE IDs, inventing owner PII. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Checklist from Inventory only. Not certification advice. No invented score VALUES. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: control Harbor Quay Inventory Hardware as pasted asset cue laptop fleet as pasted evidence note MDM as pasted; control River Ops Secure Config as pasted asset cue baseline image as pasted. Score VALUE NOT IN INPUTS. CVE ID NONE. Version: CIS Controls v8 as pasted (do not invent unreleased IG4 APIs) Workspace: Harbor Quay Ops Net as pasted SpecNames: Inventory Hardware as pasted; Secure Config as pasted. Vulnerability UNKNOWN. Banned: guaranteed score, badge invent, CVE invent, PII invent, certification invent Never: invent scores, invent badge claims, invent CVE IDs, invent owner PII Format: ledger + table + specs + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: control Harbor Quay Inventory Hardware asset cue laptop fleet evidence note MDM; control River Ops Secure Config asset cue baseline image. Score VALUE NOT IN INPUTS. CVE ID NONE. Version CIS Controls v8. Workspace Harbor Quay Ops Net. SpecNames Inventory Hardware; Secure Config; Vulnerability UNKNOWN. Lang English. Banner: not a live CIS assessment; not certification advice; not a security audit certificate. Forbidden: invented scores, badge claims, CVE IDs, owner PII, guaranteed score, badge invent, CVE invent, PII invent, certification invent. 2. CIS Controls checklist. 1. Harbor Quay Inventory Hardware | asset laptop fleet as pasted | evidence MDM as pasted | VALUE NOT IN INPUTS | CVE NONE. 2. River Ops Secure Config | asset baseline image as pasted | evidence NOT IN INPUTS | VALUE NOT IN INPUTS | CVE NONE. Badge claims not printed. Owner PII not invented. 3. Spec name set. Inventory Hardware; Secure Config as SpecNames. Vulnerability UNKNOWN so write Vulnerability NOT IN INPUTS. No numeric score VALUES printed. No third control invented. 4. Version lock. CIS Controls v8 as pasted. Unreleased IG4 APIs not used. Safeguard mapping schema NOT IN INPUTS. 5. Refuse. Score invent: refused. Badge invent: refused. CVE invent: refused. PII invent: refused. Certification invent: refused. 6. Compliance. Banned hits none. Format ledger+table+specs+version+refuse+compliance. Gaps: evidence for River Ops Secure Config, Vulnerability decision, IG tier, owner role, review cadence if any. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.