Regulatory compliance risk assessment prompt