---
name: create-risk-management-plan
description: >-
  A risk register your leadership team can act on: strategic, operational, financial, and compliance risks rated by likelihood and impact, each with an owner, a mitigation step, and a monitoring rule.
  Task type: Create. Built for Leadership.
  Use when the request sounds like "Create a Risk Management Plan".
  Do NOT use it to invent numbers, customer names, or quotes that were not supplied.
license: MIT
metadata:
  author: The Revenue AI Report
  suite: Leadership and Planning
  version: "1.0"
  source: https://www.therevenueaireport.com/prompts/create-risk-management-plan
---

# Create a Risk Management Plan

A risk register your leadership team can act on: strategic, operational, financial, and compliance risks rated by likelihood and impact, each with an owner, a mitigation step, and a monitoring rule.

One job only: a risk register your leadership team can act on: strategic, operational, financial, and compliance risks rated by likelihood and impact, each with an owner, a mitigation step, and a monitoring rule. Anything outside that job belongs in another file in the Leadership and Planning suite.

## When to use this skill

- The request matches the job above and the work repeats often enough to be worth a standard.
- You have, or can ask for, the inputs listed below.
- A person will review the output before it reaches a customer, an executive, or a board deck.

## When not to use it

- The answer needs a number, a benchmark, or a quote nobody supplied. Ask for it instead of producing one.
- The task is a different job in the same suite. Open that file rather than stretching this one.
- The output would be sent, published, or written into a system without a human read.

## Inputs to collect first

- The account, deal, team, or document this run is about
- The audience for the output and the decision it feeds
- Any internal numbers, notes, or transcripts the answer must rely on

Ask for anything missing before running. Do not fill a gap with a plausible guess.

## Process

1. Confirm the job, the audience, and the decision the output feeds.
2. Collect the inputs above. Name anything still missing out loud.
3. Run the instruction block below exactly as written, with the placeholders replaced.
4. Separate what came from the supplied inputs from what is your inference. Label the inference.
5. Hand back the output plus a short list of open questions and assumptions.

## Instruction block

Run this text with the placeholders filled in.

```text
You are a world-class Chief Executive Officer specializing in risk management. Given the following context, criteria, and instructions, create a comprehensive and high-quality Risk Management Plan that identifies, assesses, and mitigates potential risks for an organization.

## Context
The organization requires a detailed Risk Management Plan that effectively identifies and assesses potential risks, outlines strategies for risk prevention and mitigation, and establishes protocols for risk monitoring and response. This plan will serve to guide the executive team and key stakeholders in decision-making and ensuring the organization's resilience in the face of potential risks.

## Approach
1. **Initial Interaction**: Begin by engaging with the user to gather essential specifics about the organization's objectives, nature of risks faced, and any existing risk management practices.
2. **Identify Risks**: Conduct a thorough risk identification process that covers various aspects such as strategic, operational, financial, and compliance risks.
3. **Risk Assessment**: Utilize both qualitative and quantitative approaches to assess the likelihood and potential impact of identified risks.
4. **Develop Mitigation Strategies**: Formulate clear and actionable strategies for risk prevention and mitigation tailored to the identified risks.
5. **Establish Monitoring Protocols**: Create a framework for continuous monitoring and reporting of risks, ensuring effective communication with stakeholders.

## Response Format
Deliver the Risk Management Plan as a well-structured document that encompasses:
- **Executive Summary**: A brief overview of the plan.
- **Risk Identification Section**: A detailed list of potential risks categorized appropriately.
- **Risk Assessment Matrix**: A visual representation of identified risks based on likelihood and impact.
- **Mitigation Strategies Section**: Specific strategies for each identified risk.
- **Monitoring and Reporting Framework**: Guidelines for tracking and communicating risks.

## Instructions
1. **Engage the User**: Ask up to 5 targeted questions to clarify the organization's goals, industry, and specific risks.
 - Example Questions:
 1. What industry does the organization operate in?
 2. Are there specific risks that have previously impacted the organization?
 3. What are the key objectives that this Risk Management Plan should align with?
 4. Who are the primary stakeholders to be communicated with regarding this plan?
 5. What resources are currently allocated for risk management?

2. **Draft the Plan**: Based on the user responses and external best practices, create a robust Risk Management Plan, weaving in relevant insights from the provided references (e.g., principles from "The Essentials of Risk Management").
3. **Provide Skeleton Outline**: When drafting, include an outline or examples to clarify expectations. This might consist of sections like risk categories, assessment methodologies, and types of mitigation strategies.
4. **Iterate for Clarity**: Be prepared to refine the risk management plan based on user feedback to ensure alignment with their expectations.

By following these steps, the output will be a detailed and impactful Risk Management Plan that comprehensively addresses the organization's needs while demonstrating a high level of expertise in risk management practices.
```

## Decision rules

- Supplied evidence beats inference. If the two disagree, say so and keep the evidence.
- Unknown is a valid answer. Write "unknown" rather than estimating.
- Keep one recommendation per output. If the evidence supports two, present both and name the deciding input you do not have.
- Match the reading level of a working operator. Short sentences. Explain any term the reader may not use daily.

## Quality checks

- Every number, name, date, and quote traces to an input the user supplied.
- No vendor claim is repeated as fact without naming the source.
- Assumptions are listed separately from findings.
- The output answers the original request and nothing else.
- A reviewer could re-run this file with the same inputs and get the same shape of answer.

## Guardrails

- Do not send email, change CRM records, post publicly, or share data outside the workspace.
- Do not invent benchmarks, adoption rates, win rates, or customer references.
- Flag anything that needs a human decision instead of deciding it.

## Source

- Prompt page: https://www.therevenueaireport.com/prompts/create-risk-management-plan
- Suite: https://www.therevenueaireport.com/agent-skills/suites/leadership-and-planning
- Publication: The Revenue AI Report, https://www.therevenueaireport.com