Back to prompts
BusinessChatGPTClaudeGemini

Risk Assessment Matrix Builder

Generate a structured risk assessment matrix for any business initiative, identifying potential risks, their likelihood, impact, and concrete mitigation strategies.

Prompt Template

I'm planning [describe initiative, project, or business decision]. My company is a [company type/size] in [industry].

Key context:
- Timeline: [timeline]
- Budget: [approximate budget or range]
- Team size: [number of people involved]
- Dependencies: [any critical dependencies, e.g., vendors, regulations, market conditions]

Create a comprehensive risk assessment matrix with the following:

1. **Risk Identification**: List 10-15 potential risks across these categories:
   - Financial risks
   - Operational risks
   - Market/competitive risks
   - Technical risks
   - Regulatory/compliance risks
   - People/talent risks

2. **For each risk, provide:**
   - Risk description (one sentence)
   - Likelihood (Low / Medium / High)
   - Impact (Low / Medium / High / Critical)
   - Risk score (Likelihood × Impact on a 1-16 scale)
   - Mitigation strategy (specific, actionable steps)
   - Early warning indicator (how to detect this risk materializing)
   - Owner suggestion (role responsible)

3. **Summary section** with:
   - Top 5 risks ranked by score
   - Recommended review cadence
   - Escalation criteria (when to trigger contingency plans)

Example Output

# Risk Assessment Matrix: Launch of B2B SaaS Product in EU Market

Risk Matrix

| # | Risk | Category | Likelihood | Impact | Score | Mitigation | Early Warning | Owner |

|---|------|----------|-----------|--------|-------|------------|---------------|-------|

| 1 | GDPR non-compliance penalties | Regulatory | Medium | Critical | 12 | Engage EU privacy counsel pre-launch; complete DPIA; appoint DPO | Customer data handling audit flags | Legal Lead |

| 2 | Key engineer leaves mid-project | People | Medium | High | 9 | Cross-train on critical modules; document architecture decisions; retention bonus | Disengagement signals; skip-level 1:1 feedback | Engineering Manager |

| 3 | Competitor launches similar product first | Market | High | Medium | 9 | Accelerate MVP scope; focus on 2 differentiators; build switching cost features | Competitor job postings; beta announcements | Product Lead |

| 4 | Cloud infrastructure costs exceed budget by 40%+ | Financial | Medium | High | 9 | Set billing alerts at 70%; architect for cost efficiency; negotiate reserved instances | Monthly cloud spend trending above forecast | CTO |

| 5 | Payment processor integration delays | Technical | Medium | Medium | 6 | Start integration in Sprint 2; have backup processor identified; use Stripe as fallback | API sandbox testing failures; slow vendor responses | Tech Lead |

[...continues for all 12 risks]

Top 5 Risks (Ranked)

1. 🔴 GDPR non-compliance (Score: 12)

2. 🟠 Key engineer departure (Score: 9)

3. 🟠 Competitor first-mover advantage (Score: 9)

4. 🟠 Infrastructure cost overrun (Score: 9)

5. 🟡 Payment integration delays (Score: 6)

Review Cadence

- **Weekly**: Top 5 risks reviewed in project standup

- **Bi-weekly**: Full matrix review with stakeholders

- **Monthly**: Board-level risk summary

Escalation Criteria

- Any Critical-impact risk moves to High likelihood → immediate executive review

- Two or more Medium risks materialize simultaneously → trigger contingency budget

- Risk score increases by 4+ points between reviews → escalate to sponsor

Tips for Best Results

  • 💡Be specific about your industry and initiative — generic inputs produce generic risks that won't help you.
  • 💡Update your risk matrix monthly and after any major milestone or market shift.
  • 💡Pair this with the SWOT Analysis prompt for a complete strategic planning toolkit.
  • 💡Ask the AI to suggest 'black swan' scenarios separately for extreme but low-probability risks.