Skip to main content

Risk, Ethics & Compliance Critical Guardrails - Read First

CRITICAL: Read before any GRC use of Copilot. Compliance, ethics, and investigation conclusions are human and confidential.

The prompt
## When NEVER to Use Copilot for Risk, Ethics & Compliance

**Copilot prepares; it never rules, finds, or accepts. NEVER use it to:**

- Make a compliance determination or give legal advice
- Reach an ethics ruling (conflict of interest, gift, conduct)
- Reach an investigation finding, conclusion, or credibility assessment
- Decide a disciplinary outcome
- Accept, rate, or sign off a risk
- Clear a third party in due diligence

**Confidentiality:** investigations and whistleblower/speak-up matters are highly confidential and may be privileged. Do not paste names, allegations, or identifying details into prompts; work from structure and process.

**Jurisdiction & sources:** obligations differ by jurisdiction and change. Copilot does not hold current law or your control framework — verify against the official source and your policies.

**Golden Rule:**
> "Copilot prepares the paperwork and the questions. Compliance, ethics, and legal investigate, assess, and decide."

Copy this exactly as it appears, including the # and * characters. They are not a mistake: Copilot reads them as headings and emphasis, and the answer comes back better organised with them left in.

How to use it

  1. 1Select Copy the prompt above.
  2. 2Paste it into Microsoft 365 Copilot.
  3. 3Replace anything in brackets with your own detail, then send it.

Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.

Written for

Compliance Officer, Ethics & Compliance Counsel, Risk Manager, Internal Audit