Compliance Risk Assessment Framework
Identify and prioritize compliance risks with structured assessment frameworks
What You Can Do
You systematically identify, assess, and prioritize industry-specific compliance risks using proven frameworks and methodologies. Claude generates risk matrices, regulatory mappings, compliance gap analyses, and audit-ready documentation that aligns with regulatory requirements and stakeholder expectations. Each assessment is tailored to your industry, regulatory environment, and organizational risk appetite.
Features
Leverage pre-configured frameworks for financial services, healthcare, manufacturing, energy, and other regulated industries. Each framework includes jurisdiction-specific requirements and standard compliance obligations.
Generate probability-impact matrices, risk heatmaps, and scoring models that prioritize risks by severity. Customize likelihood scales, impact categories, and acceptance thresholds for your organization.
Map internal processes and controls to specific regulatory requirements (SOX, GDPR, HIPAA, ISO 27001, etc.). Identify gaps and coverage gaps automatically.
Document current-state vs. desired-state compliance posture. Identify specific control deficiencies, design gaps, and operating inefficiencies with remediation guidance.
Generate formal risk assessment reports, audit workpapers, and compliance certifications formatted for internal audit, external audit, and regulatory review.
Create prioritized remediation roadmaps with ownership assignments, timelines, resource requirements, and success metrics aligned to risk severity.
Design testing procedures, sample sizes, and evidence gathering strategies for key controls. Includes documentation of control objectives and testing outcomes.
Track compliance risk movement over time with metrics dashboards. Monitor remediation progress and identify emerging compliance exposures across your organization.
Example Output
Risk Assessment Matrix
| Risk Category | Identified Risk | Likelihood | Impact | Risk Score | Trend |
|---|---|---|---|---|---|
| Data Privacy | Unauthorized access to customer PII | Medium | High | 8/10 | ↑ |
| Financial Controls | Revenue recognition timing errors | Low | High | 6/10 | → |
| Regulatory Compliance | Incomplete audit documentation | Medium | Medium | 5/10 | ↓ |
Compliance Gap Summary
GDPR Data Processing
- Required: Documented Data Processing Agreements (DPAs) with all vendors
- Current State: 65% of vendors have signed DPAs
- Gap: 12 vendors missing DPA documentation
- Remediation: Legal review + vendor outreach by Q4 2026
Audit-Ready Documentation
Risk ID: FIN-2401 | Inadequate Expense Approval Controls
- Regulatory Requirement: SOX 404(b) — Effective internal controls over financial reporting
- Risk Description: Expense reports exceeding $5K lack documented management approval
- Testing Procedure: Select 30 expense reports >$5K; verify approval signature or email authorization
- Remediation Plan: Implement automated workflow requiring dual approval for high-value expenses
What's Included
- Risk Assessment Templates: Pre-built worksheets and checklists for identifying compliance risks across key business processes and regulatory domains.
- Industry-Specific Frameworks: Pre-configured risk frameworks for banking, insurance, healthcare, pharma, energy, telecom, and manufacturing sectors, including jurisdiction-specific requirements.
- Regulatory Requirement Catalogs: Comprehensive mappings of compliance obligations by regulation (SOX, HIPAA, GDPR, ISO 27001, PCI-DSS, etc.) to organizational processes.
- Documentation and Reporting Templates: Audit-ready reports, risk matrices, gap analyses, and remediation roadmaps formatted for internal audit, external audit, and board presentation.
- Control Testing Guidance: Design and execution guidance for control testing, including sampling methodologies, evidence collection standards, and documentation formats.
- Risk Scoring and Prioritization Models: Customizable probability-impact assessment frameworks, risk appetite matrices, and aggregation models for portfolio-level risk reporting.
Who It's For
- Compliance Officers & Compliance Managers
- Chief Risk Officers & Enterprise Risk Managers
- Internal Auditors & Audit Directors
- Quality Assurance & Process Compliance Specialists
- Regulatory Affairs & Legal/Regulatory Counsel
Best For
- Annual compliance risk assessments and refreshes
- Regulatory readiness reviews and audit preparation
- Control design and testing documentation
- Compliance gap analysis and remediation planning
- Risk prioritization and board-level reporting
You might also like
Generate SEC-compliant board materials, governance documentation, and risk disclosures that meet Delaware corporate law standards and best practices. You can prepare meeting agendas, board resolutions, committee charters, conflict disclosures, and minutes templates—all with embedded compliance logic and audit trails. This skill streamlines board administration by automating routine documentation while ensuring every template meets regulatory requirements.
by joabgonzalez
You get a systematic HIPAA compliance audit that evaluates your healthcare operations against the Privacy and Security Rules, identifies gaps by severity level, and generates prioritized remediation roadmaps. The skill scores your overall compliance risk and delivers actionable findings with specific remediation steps, timelines, and ownership assignments so you can strategically close compliance gaps and reduce breach risk.
by joabgonzalez
Analyze your board's practices, policies, and documentation to identify governance compliance gaps and fiduciary duty risks. You receive expert-level legal review findings with prioritized recommendations for liability mitigation. The skill evaluates your governance framework against industry best practices and regulatory requirements.
by joabgonzalez
You can design complete campaign architectures that escalate strategically from education through direct action, with tailored messaging for different audiences (allies, decision-makers, public). Map power dynamics to identify leverage points, build coalition strategies across organizations, and diagnose why campaigns stall so you can adjust tactics without abandoning strategy.
by joabgonzalez
Generate privacy impact assessments, data processing agreements, and breach notification templates tailored to your organization's specific data flows and regulatory obligations. You'll produce audit-ready compliance documentation, identify data handling risks, and streamline responses to regulatory requirements and data subject requests.
by joabgonzalez
You can systematically structure complex corporate ethics investigations, analyze violations against consistent standards, and develop legally defensible enforcement decisions. This skill provides investigation protocols, violation assessment frameworks, and decision documentation templates that help you document findings objectively and justify enforcement actions through structured reasoning.
by joabgonzalezYou'll transform your idea into a professionally formatted, market-ready ebook that's ready to sell on Amazon, your website, or anywhere else in just two days. This skill walks you through a battle-tested system that handles everything from manuscript structure to cover design to launch strategy, eliminating all the confusion that usually stretches ebook creation into months. You'll have a completed, polished product and a live sales page by Monday morning.
by joabgonzalez
You can synthesize heterogeneous monitoring data—quantitative metrics, qualitative interviews, financial records, and beneficiary case studies—into coherent impact narratives with established evidence hierarchies and causal chains. This skill helps you translate raw data into funder-ready reports, dashboards, and grant narratives that demonstrate program effectiveness with methodological rigor. You'll identify which program activities drove the strongest outcomes and address funder skepticism with credible, data-backed storytelling.
by joabgonzalez