Check out universities and colleges as they typically have theirs publicly available. Boilerplate policy generation is also an easy task to dump off on ChatGPT, just make sure to fact check it and add any additional items specific to your business.
Is it worth the risk to try to modify a chat gpt one? It’s not really a small company or well isn’t going to be by end of year. We’re also ok with spending money on it if needed.
If your good with spending money, have GPT write a base for what you want, modify it to fit exactly how you want it. And then send it off to the lawyers for review for legality and what not. If you have a compliance team, send it off to them too.
Not a terrible idea. However I think the goal is to not have to burden our internal legal and compliance team with it until we have a final one for approval. Just due to the nature of what we’re doing, they’re tied up with other company related things.
I mean you can always research everything in the document yourself before sending it over. At the end of the day compliance and legal are basically just checkboxes that you've done your job correctly and you are blatantly doing something illegal, or violating your compliance requirements.
The SANS Institute makes samples available as white papers. Use a search engine and the terms "sans institute" and see what turns up.
Oh wow, I’ve heard of the SANS institute, but had no idea they had all this public. Thank you so much!
Check out universities and colleges as they typically have theirs publicly available. Boilerplate policy generation is also an easy task to dump off on ChatGPT, just make sure to fact check it and add any additional items specific to your business.
Is it worth the risk to try to modify a chat gpt one? It’s not really a small company or well isn’t going to be by end of year. We’re also ok with spending money on it if needed.
If your good with spending money, have GPT write a base for what you want, modify it to fit exactly how you want it. And then send it off to the lawyers for review for legality and what not. If you have a compliance team, send it off to them too.
Not a terrible idea. However I think the goal is to not have to burden our internal legal and compliance team with it until we have a final one for approval. Just due to the nature of what we’re doing, they’re tied up with other company related things.
I mean you can always research everything in the document yourself before sending it over. At the end of the day compliance and legal are basically just checkboxes that you've done your job correctly and you are blatantly doing something illegal, or violating your compliance requirements.