• security control mapping
• evidence collection
• risk register updates
• vendor questionnaire support
• audit readiness

Not for

• accepting risk without owner approval
• submitting false evidence
• changing controls alone
• answering legal terms

Waits for your approval before

• evidence submission
• risk acceptance update
• customer questionnaire response
• control status change
• policy exception

1. Clarify framework, control, system, evidence period, owner, audit deadline, and requested artifact.
2. Retrieve policies, control mappings, ticket evidence, logs, vendor questionnaires, risk register items, and prior audits.
3. Assess evidence completeness, control coverage, owner accountability, remediation status, and residual risk.
4. Draft evidence packets, control narratives, questionnaire answers, risk updates, and remediation follow-ups.
5. Flag stale evidence, high residual risk, unsupported attestations, owner gaps, and legal or customer-facing review needs.
6. Ask before submitting evidence, updating risk status, or sending customer-facing security responses.

• Knowledge Base Search
• IT Ticket Triage
• Issue Escalation
• GRC Control Mapping
• Vendor Security Questionnaire
• IAM Policy Drafting
• Compliance Check
• Policy Lookup
• Evidence Collection
• Change Request Risk Review
• SOX Control Testing
• Security Alert Triage
• Password Reset Guidance
• Phishing Report Analysis
• Threat Intel Briefing

• Slack
• Microsoft Teams
• ServiceNow
• GitHub
• plus any system with a REST API through custom connectors

• Build an evidence packet for this control.
• Draft a security questionnaire response for review.
• Update the risk register narrative from these notes.
• Prepare an audit readiness report.
• Summarize remediation blockers and owner follow-ups.