Overview

The AI prompt management is the central place where the prompts for HITGuard's AI functions are managed. A prompt is the instruction with which the AI carries out a task (for example, creating a justification or a management summary).

Here you define which prompt an AI feature works with.
The prompts can be configured differently for each management system.
Prompts can be adjusted and reset to the default at any time.
This keeps the AI outputs maintainable and matched to the requirements of your organization.

You will find the AI prompt management in the Administration > AI prompt management. Further settings for the AI, such as whether you want to grant Practitioner users access to the AI, can be found in the global settings.

Override and fallback order of the prompts

For each AI feature, a prompt can exist on several levels. HITGuard automatically selects the prompt with the highest priority that is present. If no prompt is defined on one level, the next level takes effect (fallback).

Priority	Level	Description
1 (highest)	User prompt	A prompt that an individual user has saved for a feature. It applies only to this user and only to the management system in which it was created. Note: This prompt cannot be managed on this page. Instead, it can only be used when using the respective function.
2	Management system prompt (MMS)	A prompt that applies to a specific management system. Overrides the global prompt within this management system. All Expert and Professional users will be offered this prompt in this management system.
3	Global prompt	A system-wide prompt that applies to all management systems, provided no separate prompt is stored there.
4	Default prompt (manufacturer)	HITGuard is shipped with this prompt and it cannot be edited. It serves as a basis and is always used whenever no other level provides a prompt. It provides fundamental specifications about style and phrasing behavior that is expected of the AI in the respective functions.

In short: User prompt before management system prompt before global prompt before shipped default prompt.

Configuring functions and prompts

First, you can select the function on the left and the management system on the right.

Currently there are two functions for which you can use AI prompts:

Generate justification: This prompt is used when you have justifications generated both for audit questions (or for review results) in the vulnerability analysis.
Generate management summary: This adjusts the prompt that is used in reports.

Configuring the global prompt

If you select only a function, no management system, you can edit the global prompt.

You can create a global prompt for each AI feature.
This prompt applies system-wide and overrides the shipped default prompt, but is overridden by management-system-specific prompts.
The global prompt can be reset to the shipped default prompt at any time.

Configuring the management system prompt

If you also select a management system on the right, you can additionally create a management-system-specific "override".

This prompt overrides the global prompt, but applies only within the respective management system.
The management system prompt can be deleted or reset to the global prompt at any time.

Adjusting the user prompt

Every user can save their own prompt for a feature within a management system. This adjustment, however, is not made on this page, but directly at the point where the feature is used. In this way, Professional users, who have no access to the page "AI prompt management", can also create their own user-specific prompts.

Resetting also takes place directly at the point of use. When resetting, the normal order takes effect again: first the management system prompt, then the global prompt, then the default prompt.

System prompt (fixed)

In addition to the configurable prompts, every feature has a system prompt that is specified by HITGuard.

The system prompt contains the fundamental instructions to the AI, for example:
- the task and the role of the AI,
- formatting specifications (such as plain text or HTML),
- protective rules (guardrails),
- feature-specific context (for example the permissible answer options for audit questions).
The system prompt cannot be edited by users and is not part of the override logic described above.

Important notes / best practice

Reset to default:All prompts you have created and edited yourself (global, management system, user) can be reset to the default. In this way you can return to the shipped behavior at any time, should an adjustment not deliver the desired result.
Note the assignment: In order to maintain a management system prompt, you must be assigned to the management system in question.
User prompts at the point of use: Your own user prompts are saved and reset not in the AI prompt management, but directly when using the feature.
Check the scope before saving: A global prompt affects all management systems, a management system prompt only the respective system, a user prompt only yourself.
When in doubt, reset: If an adjustment leads to undesired results, reset the prompt to the next-lower level or to the default.

Examples / use cases

Uniform specifications for the whole organization: You adjust the global prompt for "Generate management summary" so that all reports across all management systems are created in the desired style.
Differing requirements of a management system: A certain management system requires a different phrasing of the justifications. For this you store a separate management system prompt; all other systems continue to use the global prompt.
Personal adjustment: A user wants a different phrasing for their justifications. They save their own user prompt directly during use, which applies only to them, and can reset it at any time.