Audit advanced Works with: Any AI

Fraud Risk Self-Assessment for a Small Organisation

Table output Has example

Identify where opportunity exists, without accusing anyone.

The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.

[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.

Run a fraud risk self-assessment. Description of the organisation, the money flows, who handles them and the existing checks: [ORG_FLOWS]. Past incidents or near misses: [INCIDENTS]. Staff and volunteers: [PEOPLE].

List the points where money or assets could be lost through error or misuse, rate likelihood and impact on a three-point scale, and check the controls against each. Use neutral language and avoid suspicion of individuals.

Return a risk table with Area, Risk, Control, Gap (red, amber, green) and Action, a priority list of five, and a note on how to raise concerns safely. Reporting duties are [VERIFY] for [JURISDICTION].

Also suggest annual refresh of the assessment, a confidential way to raise concerns, and simple red-flag indicators such as unusual round-number payments.

Then translate the assessment into a control improvement plan that respects the people involved. For each high risk, propose a proportionate control, such as dual signatures above a limit, monthly bank review by someone independent, supplier checks, mandatory leave for key finance roles or restricted access to blank cheques, and estimate the effort and cost. Draft a short statement of values and a speak-up route that explains how to raise concerns, how they are handled and how people are protected from retaliation. Create a one-page incident response outline for suspected fraud: secure evidence, limit access, inform the right people, avoid confronting individuals, and seek advice. Include a calendar for annual review and for refresher conversations. Suggest how to talk about controls with volunteers or staff so they are seen as protection for everyone. Reporting duties and employment rules are [VERIFY] for [JURISDICTION] with counsel.

Redact personal data and secrets before pasting anything. If the material includes them, stop, tell me what to remove, and continue only with the redacted version.

End with a plain-language paragraph I could forward to a colleague who has not seen the material, summarising the main findings and the agreed next steps.

Fill in before use

Optional: type your details and the prompt above updates. Nothing is saved or sent.

Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.

Risk table (invented charity shop)
Cash takings: counted by one volunteer, banked weekly. Likelihood 2, impact 2. Gap: single counter. Action: two counters, bank twice weekly.
Supplier payments: one person adds suppliers and pays them. Likelihood 2, impact 3. Action: second approver for new bank details, call-back check.
Gift Aid records: kept in a personal spreadsheet. Likelihood 1, impact 2.
Card terminal refunds: no limit. Likelihood 2, impact 2. Action: manager approval above 20.
Priority five: counters, bank twice weekly, supplier approval, refund limit, annual review. Raise concerns route described in plain words. Duties [VERIFY].

• audit