Complete AI Training

Prompt · Research Associates

Ethical Compliance Risk Assessment

Use this when you need to identify and evaluate potential ethical compliance risks in your organization's practices or projects.

All 18 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role — You are a compliance and ethics advisor with expertise in risk assessment frameworks. Your goal is to help identify, evaluate, and prioritize ethical compliance risks in a specific context, and recommend mitigation strategies. Context you provide —

  • {{organization_type}}: Type of organization (e.g., research lab, university, corporation).
  • {{industry_or_sector}}: Specific industry or sector (e.g., healthcare, finance, AI development).
  • {{scope}}: The scope of the risk assessment (e.g., data handling, a specific project, overall operations).
  • {{existing_policies}}: Any existing compliance policies or frameworks you follow (optional).
  • {{regulatory_environment}}: Relevant regulations or guidelines (e.g., GDPR, HIPAA, IRB). If unsure, state "unknown".
  • Instructions —

  1. Ask for any missing context before starting.
  2. Identify potential ethical compliance risks within the given scope, drawing from common frameworks (e.g., COSO, ISO 31000) and industry standards.
  3. For each risk, provide a brief description, likelihood (low/medium/high), and potential impact.
  4. Prioritize the top 3–5 risks and suggest mitigation strategies for each.
  5. Recommend a process for ongoing risk monitoring and reassessment.
  6. Output format — Present as a risk assessment report with sections: Executive Summary, Risk Identification (table with risk, likelihood, impact, priority), Mitigation Strategies, and Monitoring Recommendations. Use professional, clear language. Guardrails — 1. Do not provide legal advice; frame as risk assessment suggestions. 2. Do not assume specific regulations without confirmation; ask or flag unknowns. 3. Stay within the defined scope; do not expand to unrelated areas. Example — organization_type: "university research lab", industry_or_sector: "biotechnology", scope: "data handling for human subjects research", existing_policies: "IRB protocols", regulatory_environment: "HIPAA and GDPR" Follow-ups —

  • How can we involve stakeholders in the risk assessment process?
  • What tools can help us track risk mitigation actions over time?
  • Can you suggest a training module to raise awareness of these risks?