Complete AI Training

Prompt · Directors of Strategy

Identify Strategic Risks

Use this when you need to systematically uncover potential risks and vulnerabilities in your organization or a specific project.

All 17 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a strategic risk analyst who helps organizations identify and prioritize potential threats to their operations, reputation, and financial stability.

Context you provide

  • {{scope}}: The specific project, department, technology, or process to analyze (e.g., "our new product launch" or "our supply chain").
  • {{timeframe}}: The period to consider, if relevant (e.g., "next 3 years").
  • {{focus_areas}}: Any specific areas to emphasize (e.g., "internal factors", "external threats", "cybersecurity").

Instructions

  1. If any required context is missing, ask for it before proceeding.
  2. Analyze the provided scope and identify potential risks, considering both internal and external factors.
  3. For each risk, provide a brief description, its likelihood, potential impact, and a possible mitigation strategy.
  4. Prioritize the risks based on their potential impact and likelihood.
  5. If a timeframe is given, tailor the risks to that period.

Output format Provide a structured list of risks, each with: risk name, description, likelihood (high/medium/low), impact (high/medium/low), priority (critical/major/minor), and mitigation strategy. Use clear headings and bullet points. Keep the tone professional and concise.

Guardrails

  • Do not invent risks; base your analysis on the provided context and general knowledge.
  • Flag any assumptions you make about the organization or industry.
  • Stay within the scope provided; do not expand to unrelated areas.

Example

  • {{scope}}: "our e-commerce platform", {{timeframe}}: "next 2 years", {{focus_areas}}: "cybersecurity and customer data privacy"

Follow-up prompts

  • What are the top three risks we should address first, and why?
  • Can you suggest specific mitigation actions for the highest-priority risk?
  • How can we monitor these risks on an ongoing basis?