Security Incident Communication — External Notification Draft
The prompt
I need to draft an external notification regarding the following security incident: [BRIEF DESCRIPTION]. Audience: [SPECIFY — e.g. "affected customers", "data protection authority", "partner organisations"] Regulatory framework applicable: [SPECIFY — e.g. "GDPR", "HIPAA", "NIS2", or "none confirmed yet"] Draft a notification that includes: 1. What happened (factual, no speculation) 2. What data or systems were affected 3. What we have done in response 4. What the recipient should do, if anything 5. Who to contact for questions Use plain language. Do not make admissions of liability. Mark any section requiring legal review with [LEGAL REVIEW REQUIRED]. I will not send this without legal approval.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
CISO, Legal, Communications, Security Manager
More for Microsoft Copilot for Security
- First Look — Incident Summary
- Alert Triage — Is This a True Positive?
- Multi-Alert Correlation — Single Incident Thread
- Device Investigation — Rapid Scope
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.