Build a Detailed Risk Assessment Matrix for Your Business
Build a scored risk assessment matrix with prioritized risks, mitigation strategies, and a monitoring framework for your business.
📝 The Prompt
Act as a risk management consultant with 15+ years of experience and build a comprehensive Risk Assessment Matrix for [COMPANY NAME], a [COMPANY SIZE]-sized business operating in the [INDUSTRY] sector. The company is currently facing the following business context: [BRIEF DESCRIPTION OF CURRENT BUSINESS SITUATION, e.g., expanding into new markets, launching a new product, undergoing digital transformation].
Follow these steps to create the matrix:
1. **Risk Identification**: Identify 12-15 specific risks across the following categories:
- Strategic risks (market shifts, competitive threats)
- Operational risks (supply chain, technology failures, process gaps)
- Financial risks (cash flow, currency exposure, credit risks)
- Compliance & regulatory risks
- Reputational risks
- [CUSTOM RISK CATEGORY]
2. **Risk Scoring Matrix**: For each identified risk, assign scores on a 1-5 scale for:
- **Likelihood** (1 = Rare, 2 = Unlikely, 3 = Possible, 4 = Likely, 5 = Almost Certain)
- **Impact** (1 = Negligible, 2 = Minor, 3 = Moderate, 4 = Major, 5 = Catastrophic)
- Calculate the **Risk Score** (Likelihood × Impact) and classify as Low (1-5), Medium (6-12), High (13-19), or Critical (20-25).
3. **Risk Prioritization**: Rank all risks by score and present the top 5 critical/high risks with detailed analysis including root causes and potential business impact in dollar terms or operational disruption.
4. **Mitigation Strategies**: For each of the top 5 risks, provide:
- Primary mitigation action
- Secondary/contingency action
- Responsible party (suggest a role/department)
- Timeline for implementation
- Estimated cost of mitigation vs. cost of inaction
5. **Monitoring Framework**: Suggest specific early warning indicators and review frequency for each critical risk.
Present the matrix in a clear tabular format suitable for board-level presentation.
💡 Tips for Better Results
Be as specific as possible when describing your current business situation — the more context you provide, the more tailored and realistic the identified risks will be.
After generating the matrix, ask follow-up prompts to deep-dive into each critical risk for more granular mitigation planning.
Cross-reference the output with your actual risk register to identify blind spots or risks your team may have overlooked.
🎯 Use Cases
Risk managers, COOs, project managers, and business owners who need to systematically evaluate and prioritize business risks before major decisions, audits, or strategic pivots.