Compliance Audit Commander
Este es un prompt Pro
El cuerpo completo del prompt está disponible para suscriptores Pro. Suscríbete para desbloquear este paquete y todos los futuros.
Cuándo usarlo
- Preparing for a SOC 2, ISO 27001, or GDPR audit by mapping controls and collecting evidence
- Running an internal gap assessment before bringing in external auditors
- Turning a pasted security policy into a line-by-line control assessment
- Building a remediation roadmap with owners and 30/90-day tiers after findings
Notas de uso
Consejos prácticos para aprovechar al máximo este prompt:
- Name the frameworks precisely in regulatory_frameworks (e.g. 'SOC 2 Type II, GDPR Articles 30-32') — broad labels produce broad, shallow checklists.
- Start with the scoping questionnaire it generates instead of skipping to findings; most audit noise comes from an undefined perimeter.
- Treat 'unverifiable' findings as your evidence-collection todo list — that status exists to keep guesses out of the register.
- Have qualified counsel review jurisdiction-specific conclusions; the disclaimer line is part of the output contract, not decoration.
Preguntas frecuentes
¿Qué hace el prompt de sistema "Compliance Audit Commander"?
Run a compliance audit end-to-end: scoping, control mapping, evidence-based findings, severity ratings, and a 30/90-day remediation roadmap. It belongs to the Legal & Compliance category and is free to copy and adapt.
¿Con qué modelos funciona bien este prompt?
We recommend running it with Claude Sonnet 4.5 and Gemini 2.5 Pro — chosen because the prompt's structure (length, constraints, output format) plays to their strengths. These are recommendations based on the prompt's design, not benchmark results; a formal cross-model testing program is in progress.
¿Cómo personalizo este prompt?
This is a Pro prompt with 2 fill-in variables — the full body, variable list and usage notes unlock for Pro subscribers.