Smarter Week

How to automate it

How to automate “run risk assessments and update the risk register”

Here are 2 ways to spend less time on this, best first. Each comes with steps you can follow today and, for AI fixes, a prompt to copy.

120 min
typically, once a month
40%
of the time can be automated
Some setup
to set up

Fix 1 of 2

AIBest fix

Have AI draft risk entries and controls for the owner to validate

AI can turn interview notes or a process description into draft risk statements with likely controls; the risk owner sets the final ratings.

Typically saves about 35% of the time10 min to set up
  1. 1Gather notes from the risk owner and your risk rating scale.
  2. 2Use the prompt below.
  3. 3Review each risk with the owner and set likelihood and impact together.
Prompt to copy
From the notes below about [PROCESS OR AREA], draft risk register entries. For each: risk statement ("There is a risk that... caused by... resulting in..."), category, existing controls mentioned, suggested additional controls, and a proposed likelihood and impact on our scale [DESCRIBE SCALE] marked [PROPOSED]. Only use what is in the notes; list open questions separately.

Notes:
[PASTE]

Tools: Enterprise ChatGPT, Claude, Gemini or Microsoft Copilot (approved for confidential data)

Fix 2 of 2

Software feature

Let a compliance platform collect evidence and run attestations

Vanta, Drata, Secureframe, Sprinto and AuditBoard connect to your cloud, HR and IT systems, collect evidence automatically, and run policy sign-offs and training tracking.

Typically saves about 55% of the time16 h to set up
  1. 1List the frameworks you need (SOC 2, ISO 27001, HIPAA, GDPR).
  2. 2Connect the platform to your HR system, identity provider, cloud and code tools.
  3. 3Fix the failing tests it shows, then let it monitor continuously.
  4. 4Run policy attestations and training through it, with automatic reminders.

Tools: Vanta · Drata · Secureframe · Sprinto · AuditBoard · OneTrust

Who does this task

Roles in our library that list this as one of their common tasks. Each guide covers the rest of that role’s week.

Compliance manager

HourLeak · the 8-minute work audit

How many hours does this cost you?

The free 8-minute check works out where your week goes and gives you your top fixes. The team scan does the same for everyone and adds it up, so you know which leaks to fix first.

Take the free check Scan my team, $49

Answers are anonymous. Leaders only see team totals.

Other common tasks for Compliance managers