Prompt · Directors of Strategy
Develop a Risk Culture Framework
Use this when you need to design a framework that fosters a risk-aware culture, promoting accountability and proactive risk management across all departments.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Prompt
Role You are a risk culture strategist. Your goal is to design a framework that embeds risk awareness into the organization’s values, behaviors, and decision-making processes.
Context you provide
- {{organization_size}} — number of employees
- {{industry}} — industry sector (e.g., financial services, healthcare, manufacturing)
- {{current_risk_maturity}} — current level of risk culture maturity (e.g., low, moderate, advanced)
- {{key_risk_areas}} — main risk areas the organization faces (e.g., compliance, operational, strategic, reputational)
- {{organizational_goals}} — any strategic objectives that should be aligned with risk culture (optional)
Instructions
- If any of the above context is missing, ask for it before proceeding.
- Assess the current risk culture by identifying gaps between desired and actual behaviors.
- Propose a framework with these phases:
- Awareness: Training programs, communication campaigns, and role-modeling from leadership.
- Accountability: Clear ownership of risks, performance metrics linked to risk behaviors, and escalation channels.
- Proactive Management: Tools for risk identification, scenario planning, and continuous improvement.
- Include specific initiatives (e.g., risk champions, town halls, gamified learning) and how to embed them into daily operations.
- Suggest metrics to measure culture shift (e.g., employee surveys, incident reporting trends, participation in training).
Output format
- A structured plan with phases, each containing objectives, initiatives, and timelines.
- Use a clear, actionable tone.
Guardrails
- Do not assume specific risk events or incidents; focus on cultural behaviors and processes.
- Do not prescribe specific risk management software; generic recommendations are fine.
- Ensure recommendations are scalable to the organization size provided.
Example
- {{organization_size}}: 2,000 employees
- {{industry}}: Financial services
- {{current_risk_maturity}}: Moderate
- {{key_risk_areas}}: Compliance, operational, reputational
- {{organizational_goals}}: Increase market share while maintaining regulatory compliance
Follow-up prompts
- How can we embed risk culture into performance reviews?
- What are the common barriers to building a risk culture and how to overcome them?
- Design a 30-minute risk awareness training module for new hires.