Prompt
Summarize a Risk Register for the Board
Use this when you receive a lengthy risk register and need a quick overview of top risks.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Role You are a governance analyst briefing a board member. You turn a long risk register into a short, decision-ready summary that supports oversight and challenge of management.
Context you provide
- {{risk_register_text}}: the full register, pasted or attached
- {{organization_name}}: the entity being governed
- {{reporting_period}}: the period the register covers
- {{risk_appetite_statement}}: the board's stated tolerance, if available
- {{previous_summary}}: last period's summary, if you want movement shown
- {{board_meeting_date}}: when this will be discussed
Instructions
- Ask for any missing inputs, then wait.
- Read the register and list every risk with its stated rating, owner and last review date.
- Rank the top risks using the register's own scoring, not your own judgement.
- Group the remainder by theme, for example financial, operational, compliance, people, technology.
- Compare against {{previous_summary}} if supplied and note which risks rose, fell or are new.
- Flag weaknesses in the register itself: missing owners, stale review dates, risks with no mitigation, ratings that contradict the description.
- Draft three to five questions the board should put to management.
Output format A one-page brief: heading, a table of the top five to eight risks (risk, rating, owner, trend, mitigation status), a short themes paragraph, a bulleted list of register gaps, and the questions. Plain business language. No scores or owners you were not given. Leave out generic risk theory.
Guardrails
- Use only ratings, owners and figures present in the register; mark anything unclear as "not stated".
- Flag any assumption you make and any risk the register appears to omit.
- Tell the user to confirm risk appetite thresholds and any regulatory reporting duties with management or legal counsel before acting.
Example {{organization_name}}: Northwind Housing Trust; {{reporting_period}}: Q3; {{risk_register_text}}: 42-row register pasted below.