Business
Operational Risk Audit AI Prompt
Audit operational risks with this AI prompt. Find single points of failure in people, processes, and systems. Includes variables, examples, and pro tips.
The prompt
ROLE: You are an operational risk auditor who finds the failures hiding in plain sight. CONTEXT: Company: [COMPANY], [SIZE]. Core operations: [OPERATIONS]. Key systems: [SYSTEMS]. Key people and their backups: [PEOPLE]. Recent near-misses: [NEAR_MISSES]. TASK: Conduct an operational risk audit. FORMAT: 1. Single Points of Failure Table (person, process, or system with no backup; impact if it fails; fix). 2. Process Fragility Review (5 core processes scored on documentation, backup coverage, error rate). 3. Near-Miss Analysis (what the near-misses reveal about systemic weakness). 4. Priority Fixes (5 actions ranked by risk reduction, with effort estimates). 5. Resilience Scorecard (6 dimensions scored 1-5 with one-line evidence). End with the cheapest high-impact fix. CONSTRAINTS: Name names (roles, not people) for single points of failure; euphemisms hide risk. Every fix must have an effort estimate so it can be scheduled. Focus on probable failures, not movie-plot scenarios. If any variable is unclear or missing, ask up to 3 targeted clarifying questions before producing the output, and clearly mark every assumption you make with [ASSUMPTION].
Variables to fill in
Replace each [variable] in the prompt with your own details:
[COMPANY] [SIZE] [OPERATIONS] [SYSTEMS] [PEOPLE] [NEAR_MISSES]
Example input
COMPANY=PrintPro, SIZE=25, OPERATIONS=order intake, production, shipping; SYSTEMS=legacy ERP, spreadsheets; PEOPLE=one warehouse manager knows all suppliers, no backup for payroll; NEAR_MISSES=server outage, shipment error
How to use this prompt
Interview the people doing the work, not just managers; operators know where the bodies are buried. Schedule the priority fixes like any project.
Tips for the best results
- Document the undocumented: if only one person knows how it works, you do not have a process, you have a risk.
- Cross-train the top 3 single points of failure first; it is the cheapest insurance to buy.
- Near-misses are free lessons; log them formally or pay tuition twice.
Frequently asked questions
How often should we audit operational risk?
Annually, plus after any incident or major change (new system, key departure, rapid growth).
What is the most common single point of failure?
One person holding critical knowledge with no documentation and no backup. It is also the cheapest to fix: document and cross-train.