Compliance Risk Assessment Framework
Identify and prioritize compliance risks with structured assessment frameworks
What You Can Do
You systematically identify, assess, and prioritize industry-specific compliance risks using proven frameworks and methodologies. Claude generates risk matrices, regulatory mappings, compliance gap analyses, and audit-ready documentation that aligns with regulatory requirements and stakeholder expectations. Each assessment is tailored to your industry, regulatory environment, and organizational risk appetite.
Features
Leverage pre-configured frameworks for financial services, healthcare, manufacturing, energy, and other regulated industries. Each framework includes jurisdiction-specific requirements and standard compliance obligations.
Generate probability-impact matrices, risk heatmaps, and scoring models that prioritize risks by severity. Customize likelihood scales, impact categories, and acceptance thresholds for your organization.
Map internal processes and controls to specific regulatory requirements (SOX, GDPR, HIPAA, ISO 27001, etc.). Identify gaps and coverage gaps automatically.
Document current-state vs. desired-state compliance posture. Identify specific control deficiencies, design gaps, and operating inefficiencies with remediation guidance.
Generate formal risk assessment reports, audit workpapers, and compliance certifications formatted for internal audit, external audit, and regulatory review.
Create prioritized remediation roadmaps with ownership assignments, timelines, resource requirements, and success metrics aligned to risk severity.
Design testing procedures, sample sizes, and evidence gathering strategies for key controls. Includes documentation of control objectives and testing outcomes.
Track compliance risk movement over time with metrics dashboards. Monitor remediation progress and identify emerging compliance exposures across your organization.
Example Output
Risk Assessment Matrix
| Risk Category | Identified Risk | Likelihood | Impact | Risk Score | Trend |
|---|---|---|---|---|---|
| Data Privacy | Unauthorized access to customer PII | Medium | High | 8/10 | ↑ |
| Financial Controls | Revenue recognition timing errors | Low | High | 6/10 | → |
| Regulatory Compliance | Incomplete audit documentation | Medium | Medium | 5/10 | ↓ |
Compliance Gap Summary
GDPR Data Processing
- Required: Documented Data Processing Agreements (DPAs) with all vendors
- Current State: 65% of vendors have signed DPAs
- Gap: 12 vendors missing DPA documentation
- Remediation: Legal review + vendor outreach by Q4 2026
Audit-Ready Documentation
Risk ID: FIN-2401 | Inadequate Expense Approval Controls
- Regulatory Requirement: SOX 404(b) — Effective internal controls over financial reporting
- Risk Description: Expense reports exceeding $5K lack documented management approval
- Testing Procedure: Select 30 expense reports >$5K; verify approval signature or email authorization
- Remediation Plan: Implement automated workflow requiring dual approval for high-value expenses
What's Included
- Risk Assessment Templates: Pre-built worksheets and checklists for identifying compliance risks across key business processes and regulatory domains.
- Industry-Specific Frameworks: Pre-configured risk frameworks for banking, insurance, healthcare, pharma, energy, telecom, and manufacturing sectors, including jurisdiction-specific requirements.
- Regulatory Requirement Catalogs: Comprehensive mappings of compliance obligations by regulation (SOX, HIPAA, GDPR, ISO 27001, PCI-DSS, etc.) to organizational processes.
- Documentation and Reporting Templates: Audit-ready reports, risk matrices, gap analyses, and remediation roadmaps formatted for internal audit, external audit, and board presentation.
- Control Testing Guidance: Design and execution guidance for control testing, including sampling methodologies, evidence collection standards, and documentation formats.
- Risk Scoring and Prioritization Models: Customizable probability-impact assessment frameworks, risk appetite matrices, and aggregation models for portfolio-level risk reporting.
Who It's For
- Compliance Officers & Compliance Managers
- Chief Risk Officers & Enterprise Risk Managers
- Internal Auditors & Audit Directors
- Quality Assurance & Process Compliance Specialists
- Regulatory Affairs & Legal/Regulatory Counsel
Best For
- Annual compliance risk assessments and refreshes
- Regulatory readiness reviews and audit preparation
- Control design and testing documentation
- Compliance gap analysis and remediation planning
- Risk prioritization and board-level reporting
You might also like
You'll transform your idea into a professionally formatted, market-ready ebook that's ready to sell on Amazon, your website, or anywhere else in just two days. This skill walks you through a battle-tested system that handles everything from manuscript structure to cover design to launch strategy, eliminating all the confusion that usually stretches ebook creation into months. You'll have a completed, polished product and a live sales page by Monday morning.
by joabgonzalez
You can take raw input from coalition members—surveys, one-on-ones, working group notes—and synthesize it into unified strategy documents, position statements, and action plans that reflect genuine consensus rather than tokenistic agreement. The skill surfaces alignment gaps and disagreements early so you can facilitate resolution before publishing, building authentic buy-in and accountability across all partners.
by joabgonzalez
Organize disparate data streams from surveys, interviews, admin records, and observations into a cohesive analysis framework. Cross-validate findings across quantitative and qualitative methods to identify robust patterns and surface anomalies. Generate documented, bias-checked conclusions aligned to your theory of change that stakeholders can confidently act on.
by joabgonzalez
You can transform raw program data—quantitative metrics, qualitative feedback, and contextual factors—into coherent, evidence-based impact reports tailored to different stakeholder audiences. The skill synthesizes mixed-method data, identifies key findings and anomalies, structures reports using nonprofit best practices (theory of change alignment, outcome hierarchy, attribution frameworks), and generates data-grounded recommendations without manual compilation work.
by joabgonzalez
You can systematically investigate corporate ethics violations, generate comprehensive compliance policies, and document risk assessments with professional frameworks. The skill produces investigation plans with evidence tracking, policy frameworks aligned to legal standards, and risk matrices that prioritize remediation actions. You'll get reproducible documentation that stands up to audit review and demonstrates your organization's commitment to ethics compliance.
by joabgonzalez
Stop staring at a blank page. This skill generates a professional, detailed book outline based on proven bestseller structures used by top authors across every genre. You'll get a chapter-by-chapter roadmap with pacing, character arcs, plot beats, and reader engagement checkpoints that keep your story moving and your readers hooked.
by joabgonzalez
You can map campaign theories of change, build distributed volunteer coordination systems, develop base-resonant messaging strategies, and design multi-phase action timelines with built-in escalation tactics. This skill helps you identify pressure points on decision-makers, coordinate across coalition partners, and create contingency protocols for opposition or setbacks—enabling you to move from campaign conception through victory with coordinated strategy.
by joabgonzalez
You can systematically structure complex corporate ethics investigations, analyze violations against consistent standards, and develop legally defensible enforcement decisions. This skill provides investigation protocols, violation assessment frameworks, and decision documentation templates that help you document findings objectively and justify enforcement actions through structured reasoning.
by joabgonzalez