Prompt library Civil servants, Advanced, Across government, Analysis

Draft a risk register for a project or new service

Get a first draft of a risk register with causes, ratings, mitigations and owners that your team can then review.

Last reviewed: . Reviewer: Muhammad Asadullah.

Before you paste anything: replace names, CNIC numbers and other personal details with placeholders and never use classified material. Use only AI tools your department allows.

When to use it

You are planning a project or a new service and need a risk register for a PC-1, a steering committee or your own planning. The AI can give you a structured first list to start the team discussion.

The prompt

Draft a risk register for the project or new service described below, run by a government office in Pakistan.

Project or service: [name and one-paragraph description]
Main objectives: [what it must achieve]
Timeframe and budget: [as known, otherwise "not yet fixed"]
Teams and partners involved: [by designation or organisation]
Known concerns so far: [anything the team has already raised]

Produce a table with these columns:
1. Risk (one short sentence)
2. Cause (what could make it happen)
3. Likelihood (low, medium or high)
4. Impact (low, medium or high)
5. Mitigation (practical steps to reduce it)
6. Owner (by designation only, never by name)

Cover delivery, budget, staffing, technology, data protection, legal or procedural and public perception risks where they apply. Base every risk on the description above. Do not invent figures, dates, rules or past incidents. If information needed to rate a risk is missing, write [CHECK] in that cell. After the table, add one line stating that the ratings are a starting point for the team's judgement, not a final assessment. Write in [English / Urdu].

How to fill it in

  • The more specific the description, the more useful the risks. A vague description gives generic risks.
  • List concerns the team already has, so the AI builds on them instead of repeating them.
  • Use designations for owners, as your register will be shared.

Before you use the result

  • Treat every rating as a suggestion. The team that knows the project should agree the final likelihood and impact.
  • Remove risks that do not apply and add the ones only your team would know about.
  • Check that each owner has agreed to own the risk before the register is circulated.

Related guide: How to draft with AI.