[
  {
    "query": "Map our controls to the SOC 2 Trust Services Criteria and tell me what evidence the auditor will ask for",
    "should_trigger": true
  },
  {
    "query": "We're moving from SOC 2 Type I to Type II, what do we need to start recording?",
    "should_trigger": true
  },
  {
    "query": "Build a SOC 2 gap analysis spreadsheet with owners and systems for each control",
    "should_trigger": true
  },
  {
    "query": "What evidence do we need for CC6.2 and CC8.1 in our SOC 2 audit?",
    "should_trigger": true
  },
  {
    "query": "Build a STRIDE threat model for our new data pipeline",
    "should_trigger": false
  },
  {
    "query": "Create a risk register for the company with a heat map",
    "should_trigger": false
  },
  {
    "query": "Write the non-functional requirements for availability and security of the billing service",
    "should_trigger": false
  },
  {
    "query": "Draft a DPIA for our customer analytics feature",
    "should_trigger": false
  }
]