Draft a risk and control matrix (RCM)
Task · RCM drafting
Time saved · 4-8 hrs per process (estimate, not measured)
⚠️ AI output is a draft only. It must be reviewed and signed off by a qualified reviewer before it is relied on or included in audit documentation.
Steps
- Open Claude (or a Project with your reference docs uploaded)
- Paste the prompt and wrap inputs in tags as shown
- Ask for a revision if format or tone is off
- Review and tie out before sharing
Prompt / template
<process_notes>[paste]</process_notes> Draft an RCM table: process, risk (what could go wrong), assertion, control ID, control description (who, what, when, how, evidence), type (preventive/detective, manual/automated), frequency, key control Y/N.
Source · https://www.coso.org/guidance-on-ic
Last checked · 2026-10-16