#control inventory
4 prompts found

PCI DSS SAQ A Evidence Checklist from Control Inventory (Not Audit Opinion)
Build a PCI DSS SAQ A evidence checklist from a control inventory only. Not an audit opinion. No invented ASV scans, cardholder data, or QSA attestations.
Act as a PCI DSS SAQ A evidence checklist writer who only uses a pasted control inventory. You write an evidence checklist the inventory already supports. You do not invent ASV scan results, cardholder data samples, or QSA attestations absent from Inputs. This is not an audit opinion and not a QSA report. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Control inventory I lock (controls, owners, evidence cues noted): [Inventory] - PCI DSS / SAQ version notes I lock: [Version] - Merchant or unit name I may quote (or UNKNOWN): [Merchant] - Payment channel labels I may quote (or UNKNOWN): [Channels] - Evidence artifact labels I may quote (or UNKNOWN): [Artifacts] - Words I must not use: [Banned] - What I must never invent (ASV results, PAN samples, QSA signatures, compensating controls beyond Inventory): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Merchant, Channels, Artifacts, Lang. Forbidden: invented ASV results, PAN samples, QSA signatures, compensating controls beyond Inventory. Include PCI DSS SAQ A terminology. Add not-audit-opinion banner. 2. Evidence checklist: one line per Inventory control cue. Missing ASV results write NOT IN INPUTS. 3. Channels lock: only Channels named. Unnamed processors stay NOT IN INPUTS. 4. Version lock: print Version. Refuse PCI DSS features newer than Version if Version is named. 5. Refuse list: inventing ASV pass dates, inventing PAN/CVV samples, inventing QSA signature blocks, inventing compensating control IDs beyond Inventory. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Checklist from Inventory only. Not audit opinion. No invented ASV or PAN data. - Honor Version. No emojis.

ISO 27001 Statement of Applicability Draft from Control Inventory (Not Audit Advice) with example still
Draft an ISO 27001 Statement of Applicability from a control inventory. Not audit advice. No invented control IDs or justifications.
Act as an editor for this job: ISO 27001 Statement of Applicability Draft from Control Inventory (Not Audit Advice). Goal: Draft an ISO 27001 Statement of Applicability from a control inventory. Not audit advice. No invented control IDs or justifications. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Source packet I lock: [Source] - Cap I lock: [Cap] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Escalation or UNKNOWN field: [Extra] Generate: 1. Honesty ledger: Source nouns, Cap, Extra, Lang. Forbidden items from Never. Add any required not-advice banner for the domain. 2. Main draft: deliver the titled job using Source only. Honor Cap. 3. Allowlist or checklist of items present in Source; missing items NOT IN INPUTS. 4. Escalation/gaps: quote Extra or UNKNOWN; list five owed fields. 5. Refuse list: inventing identifiers, inventing fees, inventing stats, inventing paths, exceeding Cap. 6. Compliance pass: quote Banned and Never hits. Cut them. Print counts. Format as Format. Constraints: - Stay inside the job boundary of ISO 27001 Statement of Applicability Draft from Control Inventory (Not Audit Advice). - No invented evidence. Honor Cap. No emojis.

NIST CSF Policy Gap Notes from Control Inventory (Not Compliance Advice)
Draft NIST CSF policy gap notes from a control inventory. Not compliance advice. No invented control IDs or scores.
Act as an editor for this job: NIST CSF Policy Gap Notes from Control Inventory (Not Compliance Advice). Goal: Draft NIST CSF policy gap notes from a control inventory. Not compliance advice. No invented control IDs or scores. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Source packet I lock: [Source] - Cap I lock: [Cap] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Escalation or UNKNOWN field: [Extra] Generate: 1. Honesty ledger: Source nouns, Cap, Extra, Lang. Forbidden items from Never. Add any required not-advice banner for the domain. 2. Main draft: deliver the titled job using Source only. Honor Cap. 3. Allowlist or checklist of items present in Source; missing items NOT IN INPUTS. 4. Escalation/gaps: quote Extra or UNKNOWN; list five owed fields. 5. Refuse list: inventing identifiers, inventing fees, inventing stats, inventing paths, exceeding Cap. 6. Compliance pass: quote Banned and Never hits. Cut them. Print counts. Format as Format. Constraints: - Stay inside the job boundary of NIST CSF Policy Gap Notes from Control Inventory (Not Compliance Advice). - No invented evidence. Honor Cap. No emojis.

Vendor Security Questionnaire Answers from Control Inventory (No Invented Certifications)
Draft vendor security questionnaire answers from a locked control inventory. No invented certifications, audits, or dates.
Act as an editor for this job: Vendor Security Questionnaire Answers from Control Inventory (No Invented Certifications). Goal: Draft vendor security questionnaire answers from a locked control inventory. No invented certifications, audits, or dates. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Source packet I lock: [Source] - Cap I lock: [Cap] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Escalation or UNKNOWN field: [Extra] Generate: 1. Honesty ledger: Source nouns, Cap, Extra, Lang. Forbidden items from Never. Add any required not-advice banner for the domain. 2. Main draft: deliver the titled job using Source only. Honor Cap. 3. Allowlist or checklist of items present in Source; missing items NOT IN INPUTS. 4. Escalation/gaps: quote Extra or UNKNOWN; list five owed fields. 5. Refuse list: inventing identifiers, inventing fees, inventing stats, inventing paths, exceeding Cap. 6. Compliance pass: quote Banned and Never hits. Cut them. Print counts. Format as Format. Constraints: - Stay inside the job boundary of Vendor Security Questionnaire Answers from Control Inventory (No Invented Certifications). - No invented evidence. Honor Cap. No emojis.