Best Claude prompts for Information Security Analysts

Analyze the network architecture of a fictional company, including firewalls, intrusion detection systems, and access controls, to identify potential vulnerabilities and provide recommendations for mitigation. Consider the company's specific industry (healthcare) and regulatory requirements (HIPAA). The network consists of 500 nodes, including servers, workstations, and IoT devices. Provide a detailed report outlining the vulnerabilities found, the likelihood and potential impact of each, and prioritized recommendations for remediation, including patches, configurations, and additional security measures. Assume the company has a budget of $100,000 for security enhancements.

Develop a comprehensive incident response plan for a scenario where a ransomware attack has compromised a critical database containing sensitive customer information. The plan should include steps for initial response, containment, eradication, recovery, and post-incident activities. Consider the involvement of various stakeholders, including legal, communications, and executive teams. Provide a detailed timeline for each phase, including key milestones and decision points. Assume the attack occurred at 2 AM on a Sunday and the incident response team has 24 hours to contain the breach before significant data loss occurs.

Optimize the configuration of a SIEM system to improve the detection of advanced threats and reduce false positives. The current system is generating over 10,000 alerts per day, with a false positive rate of 95%. Analyze the current rule sets, correlation engines, and alert thresholds to identify areas for improvement. Provide recommendations for tuning the system, including modifications to rules, addition of new data sources, and adjustments to alert thresholds. Assume the SIEM system is a commercial product (e.g., Splunk) and the organization has 5 security analysts available to monitor and respond to alerts.

Conduct a risk assessment and compliance audit for a cloud-based application that handles payment card information, ensuring adherence to PCI-DSS standards. Analyze the application's architecture, including data storage, transmission, and processing, to identify potential risks and vulnerabilities. Evaluate the effectiveness of current security controls, such as encryption, access controls, and logging. Provide a detailed report outlining the risks and vulnerabilities found, as well as recommendations for remediation and compliance with PCI-DSS requirements. Assume the application is hosted on a public cloud platform (e.g., AWS) and the organization has a PCI-DSS Level 1 certification.