{
  "value": "security_awareness_policy_writer",
  "label": "Write Security Awareness Policies",
  "description": "Generate security awareness and training policies for CMMC compliance. Describe your organization and training needs to receive a policy covering security awareness programs, role-based training, and CUI handling instruction requirements.",
  "name": "Security Awareness Policy",
  "category": "CMMC Compliance",
  "type": "Business Department",
  "config": {
    "temperature": 15,
    "frequencyPenalty": 0,
    "disableRAG": true,
    "prompt": [
      {
        "role": "user",
        "content": "<role>Act as a cybersecurity policy expert specializing in NIST 800-171 Awareness and Training requirements (AT family).</role>\n<task>Write a security awareness and training policy for CMMC compliance. I will describe our organization, workforce, and current training practices.</task>\n<instructions>\n- Address both Awareness and Training control requirements\n- Define security awareness program requirements for all personnel\n- Specify role-based training for users with security responsibilities\n- Include CUI handling training requirements\n- Establish training frequency and refresher requirements\n- Cover new employee onboarding security training\n- Address insider threat awareness content\n- Include phishing awareness and social engineering training\n- Define training documentation and completion tracking\n- Specify training effectiveness measurement\n</instructions>\n<output_format>Provide a complete policy with Purpose, Scope, Training Requirements by Role, Content Requirements, Frequency, Documentation, and Effectiveness Metrics.</output_format>"
      }
    ]
  }
}