Intermediate

SOX risk-control matrix (RCM) generator for a process

Creates a SOX RCM with risks, controls, evidence, and testing attributes. Useful for building or refreshing SOX documentation efficiently.

Generate a SOX RCM for the {process_name} process.

Inputs:
- Process description: {process_description}
- Key risks: {key_risks}
- Control activities (existing/proposed): {control_activities}
- Systems and reports: {systems_reports}
- Frequency and owners: {frequency_owners}

Output:
1) RCM table: Risk, Control, Control type (prevent/detect), Frequency, Owner, Evidence, Key report dependencies, COSO component.
2) Testing attributes and suggested sample size by frequency.
3) Gaps and recommended new controls.
4) Change log for updates since last year.

Make it easy to paste into a SOX tool.

Related Prompts

Compliance & Regulatory

Intermediate

Grant compliance monitoring plan with testing cadence

Designs a grant compliance monitoring plan including testing cadence and documentation. Useful for nonprofits managing multiple grants and preventing findings.

GPT-5.2 Thinking; GPT-4.1; o3-mini

Compliance & Regulatory

Advanced

AML policy refresh: gap assessment against current requirements

Creates a structured AML policy gap assessment and an update plan. Useful for compliance leaders preparing for exams or audits.

GPT-5.2 Thinking; GPT-4.1; o3-mini

Compliance & Regulatory

Beginner

Whistleblower Policy & Procedure Draft

Drafts a safe mechanism for employees to report unethical behavior.

GPT-4oGemini 1.5 Pro

107