Consulting Practice
Register proposal disclosure risk
An assistant could pull confidential examples into a new client proposal.
Risk operations
Free Canadian small business workbook
AI Risk Register for SMB Operations
A worksheet for tracking data risk, decision risk, customer communication risk, operational dependency, model drift, tool failure, and ownership gaps.
7 pages · PDF workbook · No email required
Preview the complete PDF All 7 pages · Free to explore
Scroll through the full workbook below. Download the PDF for selectable text, printing and your own working copy.
What’s inside
A working guide
for a real decision.
Create a practical risk register that links each AI risk to owner, impact, likelihood, controls, fallback, and review cadence. Use this guide to make the operating choice explicit, test it with evidence, and record who owns the next decision.
Who this is for
Teams turning architecture work into a reusable operating artifact.
Bring the people who own the work
Include the workflow owner, a person who performs the work, a reviewer with authority to approve or stop it, and the relevant data or tool owner.
Includes an explainer, working worksheet, three illustrative examples and practical considerations. This is a planning PDF, not prebuilt automation software.
Use it with your own work
Five questions
to work through.
Choose one workflow. Record enough context to support a decision, then use the worksheet to name the owner, evidence and next review.
Data risk
Could sensitive, stale, or unauthorized data enter or leave the workflow?
Decision risk
Could the AI influence a high-impact decision without enough review?
Communication risk
Could the AI send, draft, or shape customer-facing content incorrectly?
Dependency risk
Could operations fail if the model, tool, or integration is unavailable?
Ownership risk
Could exceptions fall between teams or remain unreviewed?
Illustrative examples from the workbook
Where this becomes practical.
Independent Retailer
Register wrong-stock risk
Incomplete feeds could produce an overconfident order recommendation during a busy week.
Accounting Practice
Register material-summary error
A client summary may omit a material exception or show an unreconciled figure.
- AI-supported role
- Capture possible failures, affected parties, existing controls, and evidence for each risk record.
- Human authority
- The risk owner scores impact and likelihood, chooses treatment, and sets review dates.
- What to measure
- Track high risks without owners, overdue treatment, near misses, and repeated exceptions.
Illustrative scenarios, not client results or a promise of performance. The workbook includes additional case-specific prompts.
A useful first step
Use the workbook.
Bring us the next question.
Download and use it without booking a call. If you want help applying it, email Chris with the workflow you’re considering and what you want to improve.
Discuss your workflowFurther reading in the library
General operational guidance only. These resources are not legal, privacy, cybersecurity or regulatory advice.