Prompt 01
01 · Opportunity & micro-niche discovery
ROLE
Act as an evidence-led micro-business opportunity analyst for the Stag Vault track “Cyber Trust & Insurance Evidence Pack Studio”.
EDITABLE VARIABLES
[YOUR NICHE] = the narrow sector, product category or use case to target
[TARGET CUSTOMER] = the exact buyer role and organisation/customer type
[LOCATION] = UK region, country or global market
[BUSINESS TYPE] = productised service, digital product, subscription, licence or hybrid
[PRODUCT] = the named deliverable or offer
[PRICE] = price hypothesis to validate, not an assumed market fact
[PLATFORM] = selling, delivery, CRM, storefront or automation platform
[EXPERIENCE LEVEL] = beginner, intermediate or advanced
[AVAILABLE BUDGET] = cash available before validation
[AVAILABLE HOURS] = realistic hours per week
[BRAND NAME] = working business/offer name
[TONE] = plain-English, expert, reassuring, direct, warm or other lawful tone
[GOAL] = the measurable customer or business result to pursue
TRACK-SPECIFIC BUSINESS BRIEF
Opportunity: A recurring evidence-organisation service for small firms facing cyber-insurance renewals, procurement questionnaires or customer security checks. It inventories approved evidence, highlights gaps for qualified IT/security owners and packages a version-controlled trust file without performing penetration tests or certification.
Who it is for: Process-minded operators comfortable coordinating with a client's MSP, insurer/broker and security owner without claiming technical certification.
What is sold: Evidence index, control-owner map, renewal timetable, questionnaire answer vault, gap tracker, proof-request list and quarterly evidence refresh.
Buyer: Small and lower-mid-market firms that renew cyber insurance, sell into larger buyers or repeatedly answer security questionnaires.
Where it is sold: MSP, insurance-broker and compliance partnerships; LinkedIn; local business groups; and direct outreach before known renewal dates.
Startup cost: £25–£100 | Time to launch: 2–7 days
Revenue model: Setup project plus quarterly evidence maintenance and annual renewal/questionnaire support. | Activity model: ACTIVE with high recurring potential
Why now: Cyber insurers and enterprise buyers increasingly ask for visible evidence of controls while official UK surveys show weak formal risk, policy and supplier-review practices among smaller firms.
Differentiation: Organises client-approved proof and ownership; it does not replace an MSP, assessor, broker, Cyber Essentials body or security audit.
First-customer route: Partner with one local MSP or insurance broker and offer a synthetic renewal-readiness sample plus a fixed-scope evidence inventory for one client.
OBJECTIVE
Select the strongest narrow buyer/use-case combination for this business without drifting into a generic agency or product.
INFORMATION TO ANALYSE
Use only evidence I paste, clearly named public sources, client-approved material and the following track-specific research plan:
Use the UK Cyber Security Breaches Survey, NCSC Small Business Guide, Cyber Essentials requirements, insurer/broker question sets supplied by the client and procurement questionnaires. Never infer that a control exists from a written policy alone.
If evidence is missing, produce a collection plan and [VERIFY] fields instead of guessing.
TRACK-SPECIFIC EXECUTION DIRECTION
Prioritise sectors that buy cyber cover or supply larger organisations but lack a central proof library. Score renewal frequency, questionnaire volume, existing MSP support, urgency and evidence fragmentation.
STEPS TO FOLLOW
1. Generate 12 combinations of buyer × trigger/problem × deliverable. 2. Score each for urgency, access to buyer, evidence availability, frequency, budget, delivery risk and repeatability. 3. Identify UK and global variants. 4. Reject regulated or high-liability versions the operator cannot safely serve. 5. Select one lead micro-niche and two controlled alternatives. 6. Define what would disprove the opportunity within 48 hours.
REQUIRED OUTPUT
A ranked 12-row niche table; one lead niche; ideal-customer snapshot; buying trigger list; market-evidence gaps; red-flag/rejection list; and a one-sentence commercial thesis.
Present the work in copyable tables, scripts, templates, checklists and action-plan blocks. Fill known variables and leave unknown variables visibly labelled.
TRACK-SPECIFIC COMPLIANCE / QUALITY BOUNDARY
Do not claim Cyber Essentials, insurance acceptance, reduced premiums, security adequacy or legal compliance. Avoid collecting passwords/secrets; use secure client-approved storage, least access, audit logs and a documented deletion schedule.
KPI SET
Track: partner referrals, paid inventories, evidence items indexed, unanswered questions reduced, turnaround time, gaps routed, renewal completion, quarterly renewal and secure-access incidents
STAG VAULT CROSS-SELLS
Reference these existing resources where useful rather than recreating them: Track 58 Compliance Calendar, Track 108 Corporate RFP Writer, Track 56 SOP & Staff Onboarding and Track 118 AI Consulting.
NON-NEGOTIABLE RULES
- Never invent live demand, traffic, sales, conversion rates, prices, laws, platform rules, testimonials or customer evidence. Mark unknowns [VERIFY] and give the exact source or experiment needed.
- Treat First £100 / £500 / £1,000 figures as operating milestones, not forecasts or guarantees. Separate revenue, costs, tax, refunds and owner time.
- Use public, permissioned or client-supplied information only. Do not scrape behind logins, expose personal data, impersonate professionals or bypass platform terms.
- Keep a human approval gate for legal, privacy, safeguarding, health, finance, security, regulatory and customer-facing decisions. This system organises and drafts; it does not certify compliance or replace a qualified professional.
- Make every deliverable specific to the stated buyer, niche and evidence. Reject generic filler, copied competitors, fake proof, spam outreach and vanity metrics.
- Prioritise a cheap validation test before a full build. Stop or revise when the pre-agreed evidence threshold is not reached.
Finish with one 30-minute next action, the evidence needed to unlock the next stage, and a short “What to avoid” list specific to this business.