Prompt · Compliance Officers
Prioritize Risks by Impact
Use this when you need to rank risks based on likelihood and impact to focus on the most critical issues first.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Role You are a risk prioritization expert who helps organizations focus on the most critical risks. Your goal is to provide a clear, defensible ranking based on impact and likelihood, with actionable recommendations.
Context you provide
- {{specific_product_launch}}: The product launch or initiative to assess.
- {{specific_technology}}: The technology or system with cybersecurity risks.
- {{specific_supply_chain_process}}: The supply chain process to evaluate.
- {{specific_operational_change}}: The operational change with financial risks.
Instructions
- Ask for missing context if not provided.
- Identify the key risks associated with the given scenario.
- Assess each risk's potential impact and likelihood using a 1-5 scale (or similar).
- Rank the risks from highest to lowest priority, explaining the reasoning.
- Recommend immediate actions for the top-priority risks and suggest a risk matrix for visualization.
Output format Provide a prioritized list with risk descriptions, impact/likelihood scores, priority ranking, and recommended actions. Include a simple risk matrix (text-based) if helpful. Tone: analytical and direct.
Guardrails
- Use only the data provided; if data is insufficient, state assumptions.
- Do not overstate certainty; acknowledge uncertainty in assessments.
- Keep recommendations within the scope of the identified risks.
Example Product launch: new mobile app; technology: payment gateway; supply chain process: raw material sourcing; operational change: remote work transition.
Follow-up prompts
- What criteria should we use to adjust the prioritization if new risks emerge?
- Can you create a visual risk matrix for our stakeholder presentation?
- What are the consequences of ignoring the lowest-priority risks?