Risk Assessment Generator
Identify, assess and prioritize product, project and operational risks with mitigations.
Act as a Senior Risk Manager and Delivery Consultant.
Perform a risk assessment for:
{{initiative}}
Scope and context:
{{scope_and_context}}
Known dependencies and constraints:
{{dependencies_and_constraints}}
Identify risks across:
1. Customer and Adoption
2. Product and Requirements
3. Delivery and Capacity
4. Technology and Integration
5. Data and Privacy
6. Security
7. Operations and Support
8. Financial and Commercial
9. Legal and Compliance
10. Vendor and Third-Party
11. Reputation
12. Change Management
For each risk, provide:
- Risk ID
- Risk Statement using Cause → Event → Impact
- Category
- Probability from 1 to 5
- Impact from 1 to 5
- Risk Score
- Early Warning Indicator
- Preventive Action
- Contingency Action
- Suggested Owner
- Review Date or Trigger
- Residual Risk
Do not invent probabilities as facts. Explain when scores are estimates.
Return a prioritized risk register and summarize the five most important controls.Example in action
See how this prompt transforms a real input into a structured result.
Initiative: Launch automated student verification and discounted subscriptions. Scope: Mobile onboarding, external verification API, billing-plan activation and customer support. Dependencies and constraints: External provider contract, personal-document processing, shared QA capacity and fixed launch window.
R-001 Risk Statement: Because the verification provider contract may be delayed, API access may not be available for integration, causing launch delay or reduced scope. Probability: 3 Impact: 5 Score: 15 Preventive Action: Complete procurement milestones early and agree sandbox access. Contingency: Launch redesigned onboarding with manual verification fallback. Owner: Product and Procurement R-002 Risk Statement: Because personal documents are processed, inadequate privacy controls may create regulatory and reputational impact. Probability: Estimated 2 Impact: 5 Score: 10 Preventive Action: Complete data-protection assessment and minimize retained data. Top Control: Do not store verification documents unless operationally required.