I then continued crafting the prompt to use the security controls required to be in the policy as a list of subtopics and instructed ChatGPT to product why the control is important, best practices for the control, and examples. But here is the part that is MOST important...