Legal Risk Assessment
Produces executive-ready risk reports evaluating likelihood, impact, and mitigation across legal risk categories for business scenarios, transactions, or operational decisions.
Prerequisites
Gather before starting:
- Scenario description — transaction summary, venture details, or decision under review
- Source documents — contracts, term sheets, regulatory filings, corporate records
- Organizational context — industry, jurisdiction(s), risk tolerance, strategic objectives
- Known constraints — timeline, budget, regulatory environment, stakeholder concerns
Workflow
1. Document Review
Extract from all provided materials:
| Element |
Look For |
| Obligations & duties |
Performance requirements, deadlines, conditions precedent |
| Representations & warranties |
Scope, survival periods, indemnification triggers |
| Financial exposure |
Stated amounts, penalties, liquidated damages |
| Jurisdictional issues |
Choice of law, forum selection, regulatory bodies |
| Notice & cure provisions |
Timelines, methods, non-compliance consequences |
| Ambiguous or silent terms |
Missing definitions, unclear risk allocation, gaps |
2. Risk Identification
Categorize all material risks:
| Category |
Key Inquiry |
| Regulatory compliance |
Licensing, permits, reporting, pending rule changes |
| Contractual liability |
Breach exposure, indemnification chains, liability gaps |
| Litigation probability |
Dispute history, enforceability, venue risk |
| IP vulnerability |
Ownership disputes, licensing gaps, infringement exposure |
| Employment & labor |
Classification, non-competes, WARN Act, benefits |
| Tax implications |
Structure-dependent exposure, transfer pricing, nexus |
| Reputational & governance |
Fiduciary duties, disclosure obligations, ESG |
3. Risk Scoring
Rate each risk on a 5x5 matrix. Rating = Likelihood x Impact.
Likelihood: 1 Remote — 2 Unlikely — 3 Possible — 4 Likely — 5 Near certain
Impact: 1 Negligible (<$50K) — 2 Minor ($50K–$500K) — 3 Moderate ($500K–$5M) — 4 Major ($5M–$50M) — 5 Severe (>$50M)
Thresholds: Low (1–6), Medium (7–12), High (13–19), Critical (20–25)
4. Mitigation Strategies
For each Medium/High/Critical risk, propose mitigations and assess feasibility, cost, and residual risk:
| Strategy |
Examples |
| Eliminate |
Restructure transaction, remove problematic terms |
| Transfer |
Insurance, indemnification, contractual risk allocation |
| Reduce |
Compliance protocols, enhanced due diligence, reps & warranties |
| Accept |
Document rationale, establish reserves, monitor triggers |
5. Gap Analysis
Flag explicitly:
- Missing documents or facts affecting risk precision
- Unsettled legal standards or pending regulatory changes
- Recommended due diligence steps or expert consultations
Output Structure
## Executive Summary
- 3–5 sentence risk posture overview
- Top 3 risks with ratings
- Go / No-Go / Conditional recommendation
## Risk Matrix
[Table: Risk | Category | Likelihood | Impact | Rating | Key Driver]
## Detailed Risk Analysis
### [Risk Category]
#### [Specific Risk]
- **Exposure**: factual basis with document references
- **Legal basis**: applicable statute or case law
- **Likelihood rationale**: enforcement trends, precedent
- **Impact quantification**: dollar range, operational consequences
- **Mitigation options**: ranked by effectiveness
## Information Gaps & Limitations
[Bulleted list with recommended next steps]
## Recommendations
- Numbered, actionable items tied to specific risks
- Prioritized by risk rating and feasibility
- Decision framework: proceed / modify / decline
Checks
- Reference specific contract sections, statutes, and facts — no generic risk language
- Quantify exposure with dollar ranges; acknowledge uncertainty explicitly
- Calibrate recommendations to the organization's stated risk tolerance
- Distinguish deal-breakers from commercially acceptable risks
- Mark unverifiable authority with
[VERIFY]
- Do not minimize risks to favor a preferred outcome
- Note jurisdiction-specific variations where U.S. state law divergence is material
- Keep the executive summary accessible to non-lawyers
1---2name: risk-assessment3description: Generates structured legal risk assessment reports with categorized risks, 5x5 scoring matrices, and mitigation strategies. Use when preparing risk assessments, due diligence reports, transaction risk reviews, venture analysis, or board-level risk summaries.4---5
6# Legal Risk Assessment
7
8Produces executive-ready risk reports evaluating likelihood, impact, and mitigation across legal risk categories for business scenarios, transactions, or operational decisions.
9
10## Prerequisites
11
12Gather before starting:
13- **Scenario description** — transaction summary, venture details, or decision under review
14- **Source documents** — contracts, term sheets, regulatory filings, corporate records
15- **Organizational context** — industry, jurisdiction(s), risk tolerance, strategic objectives
16- **Known constraints** — timeline, budget, regulatory environment, stakeholder concerns
17
18## Workflow
19
20### 1. Document Review
21
22Extract from all provided materials:
23
24| Element | Look For |
25|---|---|
26| Obligations & duties | Performance requirements, deadlines, conditions precedent |
27| Representations & warranties | Scope, survival periods, indemnification triggers |
28| Financial exposure | Stated amounts, penalties, liquidated damages |
29| Jurisdictional issues | Choice of law, forum selection, regulatory bodies |
30| Notice & cure provisions | Timelines, methods, non-compliance consequences |
31| Ambiguous or silent terms | Missing definitions, unclear risk allocation, gaps |
32
33### 2. Risk Identification
34
35Categorize all material risks:
36
37| Category | Key Inquiry |
38|---|---|
39| Regulatory compliance | Licensing, permits, reporting, pending rule changes |
40| Contractual liability | Breach exposure, indemnification chains, liability gaps |
41| Litigation probability | Dispute history, enforceability, venue risk |
42| IP vulnerability | Ownership disputes, licensing gaps, infringement exposure |
43| Employment & labor | Classification, non-competes, WARN Act, benefits |
44| Tax implications | Structure-dependent exposure, transfer pricing, nexus |
45| Reputational & governance | Fiduciary duties, disclosure obligations, ESG |
46
47### 3. Risk Scoring
48
49Rate each risk on a 5x5 matrix. **Rating = Likelihood x Impact.**
50
51**Likelihood:** 1 Remote — 2 Unlikely — 3 Possible — 4 Likely — 5 Near certain
52
53**Impact:** 1 Negligible (<$50K) — 2 Minor ($50K–$500K) — 3 Moderate ($500K–$5M) — 4 Major ($5M–$50M) — 5 Severe (>$50M)
54
55**Thresholds:** Low (1–6), Medium (7–12), High (13–19), Critical (20–25)
56
57### 4. Mitigation Strategies
58
59For each Medium/High/Critical risk, propose mitigations and assess feasibility, cost, and residual risk:
60
61| Strategy | Examples |
62|---|---|
63| Eliminate | Restructure transaction, remove problematic terms |
64| Transfer | Insurance, indemnification, contractual risk allocation |
65| Reduce | Compliance protocols, enhanced due diligence, reps & warranties |
66| Accept | Document rationale, establish reserves, monitor triggers |
67
68### 5. Gap Analysis
69
70Flag explicitly:
71- Missing documents or facts affecting risk precision
72- Unsettled legal standards or pending regulatory changes
73- Recommended due diligence steps or expert consultations
74
75## Output Structure
76
77```
78## Executive Summary
79- 3–5 sentence risk posture overview
80- Top 3 risks with ratings
81- Go / No-Go / Conditional recommendation
82
83## Risk Matrix
84[Table: Risk | Category | Likelihood | Impact | Rating | Key Driver]
85
86## Detailed Risk Analysis
87### [Risk Category]
88#### [Specific Risk]
89- **Exposure**: factual basis with document references
90- **Legal basis**: applicable statute or case law
91- **Likelihood rationale**: enforcement trends, precedent
92- **Impact quantification**: dollar range, operational consequences
93- **Mitigation options**: ranked by effectiveness
94
95## Information Gaps & Limitations
96[Bulleted list with recommended next steps]
97
98## Recommendations
99- Numbered, actionable items tied to specific risks
100- Prioritized by risk rating and feasibility
101- Decision framework: proceed / modify / decline
102```
103
104## Checks
105
106- Reference specific contract sections, statutes, and facts — no generic risk language
107- Quantify exposure with dollar ranges; acknowledge uncertainty explicitly
108- Calibrate recommendations to the organization's stated risk tolerance
109- Distinguish deal-breakers from commercially acceptable risks
110- Mark unverifiable authority with `[VERIFY]`
111- Do not minimize risks to favor a preferred outcome
112- Note jurisdiction-specific variations where U.S. state law divergence is material
113- Keep the executive summary accessible to non-lawyers
CaseMark