Tosea.ai LogoTosea.ai

Enterprise risk assessment prompt for PowerPoint

A prompt for an 8-slide enterprise risk assessment for an executive risk committee. It works from the risk register, audit findings and operating plan, scores risks on defined likelihood and impact scales, and asks the committee to confirm top risks and fund mitigation.

Output
Full deck
Works with
Tosea, ChatGPT, Claude, Gemini
Updated
Enterprise risk assessment example slide: 5x5 likelihood and impact heatmap, risk register with owners, 90-day mitigation plan
Heatmap and plan · 5x5 likelihood and impact heatmap, risk register with owners, 90-day mitigation planExample slide

Enterprise risk assessment prompt

Fill in any highlighted fields, then copy or run it.

Create an 8-slide enterprise risk assessment from the risk register, audit findings, and operating plan.
Audience: executive risk committee.
Decision: confirm top risks and fund mitigation.
Define likelihood and impact scales. Show inherent risk, controls, residual risk, owner, mitigation, date, and status.
Use a 5x5 heatmap, priority table, and 90-day plan.
Do not reduce a score for actions not yet implemented. Flag weak evidence and missing owners.
67 words

Why this prompt works

  • Scales are defined first

    "Define likelihood and impact scales" gives a score of 4 a stated meaning, so two committee members read the heatmap the same way.

  • Inherent and residual side by side

    Showing inherent risk, controls and residual risk together lets the committee see how much the current controls reduce exposure.

  • No credit for planned actions

    "Do not reduce a score for actions not yet implemented" stops residual scores from improving on paper before mitigation is in place.

  • Weak spots are flagged

    The prompt asks the model to flag weak evidence and missing owners, so a risk with no owner shows up as a gap to fix rather than a blank cell.

Adapt it to your own deck

  • Use your scoring scale

    If your framework uses a 4x4 or 3x3 matrix, say so and point to your definitions: "Score impact 1-4 as defined in the attached risk policy."

  • Focus on one risk domain

    For a cyber or supplier review, narrow the scope: "Include only technology and third-party risks from the register." Keep the heatmap and 90-day plan.

  • Brief the board

    For a board, cut to 3 slides: heatmap, top five risks with owners, and the funding request. Add "Show movement since last quarter for each top risk."

Enterprise risk assessment FAQ

What is a 5x5 risk matrix?

A grid that rates each risk from 1 to 5 on likelihood and on impact. The cell where the two meet, usually shaded from green to red, shows how severe the risk is and helps rank where to act first.

What is the difference between inherent and residual risk?

Inherent risk is the exposure before any controls. Residual risk is what remains after the controls that are actually in place. The gap between the two shows how much work the controls are doing.

Does this prompt work in ChatGPT, Claude or Gemini?

Yes. You will get a scored register, heatmap placement and slide text to lay out yourself. In Tosea you attach the risk register or audit report with the prompt, pick a template, and get slides you can edit and export to PowerPoint (.pptx).

Figures on the example slides are illustrative.

Prefer not to write a prompt?

Upload the document. Tosea drafts the deck, you edit and export.

Start for free