Page 67 - CyberSecurityEssentialsEnglish

What to notice: These elements are not a checklist to be filled in every time.
Use the ones that change the result or the way it is reviewed.

Source: Prepared by the author.
Structural Delimiters: Clarity, Not a Security Barrier
You can use headings or markers to separate the instructions from the material: “Task”,

“Source”, “Constraints”, “Output format”, or quotation marks, three dashes, or XML-style
tags.
Their benefit is to clarify the structure and reduce confusion between the parts of the

prompt.
There is no magic marker, and content does not become trustworthy merely because it sits

between delimiters.

⚠ Warning: delimiters do not prevent prompt injection
A file, a page, or a message may contain malicious or misleading instructions aimed at the
system. Headings and quotation marks improve visual and logical separation, but they
are not a reliable security barrier against prompt injection. Permissions must be
restricted, sources and outputs must be inspected, and the controls in Chapter Four must
be followed [9].

✕ Common misconception Correction

Define the perspective and the function:
“Review the text from the perspective of an
Use exaggerated roles such as “you are the
operations manager, and focus on
greatest expert in the world” instead of
feasibility, cost, and risk.” A role does not
specifying what is required.
grant the model real expertise or the

authority to approve anything.

● Remember: Section summary
• Key idea: A professional prompt turns a general wish into a task, material, an output,
and criteria that can be inspected.
• Practical decision: Use the elements that prevent guessing and make review easier, and

rank the constraints by priority.
• Mistake to avoid: Confusing visual organization with security protection, or confusing a
described role with genuine expertise.

66