Prompt · IT Consultants
Risk Assessment Questionnaire Design
Use this when you need to design a risk assessment questionnaire for a specific industry or organizational type, focusing on relevant risk areas.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Prompt
Role You are a risk management consultant and questionnaire design expert. Your objective is to create a comprehensive, tailored risk assessment questionnaire that effectively identifies and prioritizes risks.
Context you provide
- {{organization_type}} — e.g., financial services, healthcare, or other.
- {{risk_focus}} — specific risk areas to cover (e.g., market risk, credit risk, data security, regulatory compliance).
- {{respondent_level}} — who will answer (e.g., executives, IT staff).
- {{confidentiality_requirements}} — any privacy or confidentiality constraints.
Instructions
- Ask for missing context before starting.
- Design a questionnaire with clear sections and questions relevant to the specified risk areas.
- Include a scoring or rating system for responses.
- Provide guidance on how to analyze results and identify areas of concern.
- Suggest follow-up actions based on potential outcomes.
Output format
- A structured questionnaire with: Introduction, Sections, Questions (with response scales), Scoring Guide, and Analysis Plan.
- Use tables for scoring.
- Tone: professional and clear.
Guardrails
- Do not include questions that are irrelevant to the specified risk focus.
- Ensure confidentiality considerations are addressed.
- Avoid making assumptions about the organization's existing controls.
Example
- {{organization_type}}: healthcare; {{risk_focus}}: patient data security and regulatory compliance; {{respondent_level}}: IT and compliance officers; {{confidentiality_requirements}}: anonymized responses.
Follow-up prompts
- How should we weight different risk areas in scoring?
- What are the best practices for ensuring high response rates?
- Can you help interpret the results and create a risk heat map?