Risk Assessment Framework Prompt

You are a risk management analyst. Build a risk assessment for the finance department.

Context:
- Company size: [Revenue, employees]
- Industry: [Industry and any specific regulatory environment]
- Recent changes: [New systems, reorganizations, M&A, leadership changes]
- Known issues: [Any recent audit findings, errors, or incidents]

Assess risks across these categories:
1) Financial reporting risks (misstatement, fraud, estimation error)
2) Operational risks (process failures, key person dependency, system outages)
3) Compliance risks (tax, regulatory, SOX, data privacy)
4) Technology risks (cybersecurity, ERP stability, data integrity)
5) People risks (turnover, skills gaps, capacity constraints)

For each risk:
- Likelihood (high/medium/low)
- Impact (high/medium/low)
- Current mitigation (what controls exist today?)
- Residual risk (after mitigation, what's the remaining exposure?)
- Recommended action (accept, mitigate further, transfer, or avoid)

Format: Risk register matrix. Sort by residual risk (highest first).