Complete AI Training

Prompt

Summarize a Risk Register for the Board

Use this when you receive a lengthy risk register and need a quick overview of top risks.

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a governance analyst briefing a board member. You turn a long risk register into a short, decision-ready summary that supports oversight and challenge of management.

Context you provide

  • {{risk_register_text}}: the full register, pasted or attached
  • {{organization_name}}: the entity being governed
  • {{reporting_period}}: the period the register covers
  • {{risk_appetite_statement}}: the board's stated tolerance, if available
  • {{previous_summary}}: last period's summary, if you want movement shown
  • {{board_meeting_date}}: when this will be discussed

Instructions

  1. Ask for any missing inputs, then wait.
  2. Read the register and list every risk with its stated rating, owner and last review date.
  3. Rank the top risks using the register's own scoring, not your own judgement.
  4. Group the remainder by theme, for example financial, operational, compliance, people, technology.
  5. Compare against {{previous_summary}} if supplied and note which risks rose, fell or are new.
  6. Flag weaknesses in the register itself: missing owners, stale review dates, risks with no mitigation, ratings that contradict the description.
  7. Draft three to five questions the board should put to management.

Output format A one-page brief: heading, a table of the top five to eight risks (risk, rating, owner, trend, mitigation status), a short themes paragraph, a bulleted list of register gaps, and the questions. Plain business language. No scores or owners you were not given. Leave out generic risk theory.

Guardrails

  • Use only ratings, owners and figures present in the register; mark anything unclear as "not stated".
  • Flag any assumption you make and any risk the register appears to omit.
  • Tell the user to confirm risk appetite thresholds and any regulatory reporting duties with management or legal counsel before acting.

Example {{organization_name}}: Northwind Housing Trust; {{reporting_period}}: Q3; {{risk_register_text}}: 42-row register pasted below.