Turn a process walkthrough into a narrative with key controls
Converts walkthrough interview notes into a clear process narrative, a step list, and the key controls and gaps at each step.
The prompt
Help me document a business process from my walkthrough notes.
Process: [e.g. "procure-to-pay", "user access provisioning", "customer onboarding"]
Walkthrough notes: [PASTE - who does what, in which system, with what evidence]
Objectives this process must achieve: [e.g. completeness, accuracy, authorization, regulatory requirement]
Systems involved: [LIST]
Produce:
1. Process narrative - plain language, in sequence, 300 words or less.
2. Step table with columns: Step #, Activity, Performed by (role, not name), System, Input, Output, Evidence retained.
3. Controls identified - for each: control description (who, what, when, how, evidence), type (preventive/detective), nature (manual/automated/IT-dependent manual), frequency, and the risk it addresses.
4. Gaps and observations - risks with no control, controls that rely on one person, segregation-of-duties conflicts, manual workarounds, and spreadsheets or reports used without checks on their completeness and accuracy.
5. Open questions for the process owner to confirm before I finalize.
Rules:
- Only describe what my notes say happens. If something is implied but not stated, list it as an open question, not a fact.
- Write control descriptions precisely enough that another auditor could test them.
Highlighted [brackets] are blanks to replace with your own details.
Fill in the blanks and use this promptMore Legal & Compliance prompts
What to fill in
- PASTE - who does what, in which system, with what evidence
- LIST
How this prompt is built
This prompt follows the Few-Shot structure (Few-shot prompting). A few-shot prompt includes one or more worked examples of the input and the output you want, so the model can copy the pattern instead of guessing it.
Related prompts
- Check my AI workflow for privacy and data-protection risksMaps the personal and confidential data in an AI-assisted process and flags privacy and compliance risks to fix before launch.
- Track usage rights for talent, music, and stock in a campaignA rights register showing what every asset is licensed for, where and until when, plus renewal alerts and gaps to clear before launch.
- Respond to a student records request under FERPAWorks out whether to release student records, what to redact, what to log, and drafts the response letter.
- Write a student conduct decision letter that follows due processDrafts a clear, fair discipline decision letter with findings, policy basis, sanction, and appeal rights.