Begin risk mapping once your campaign strategy is defined, but before creative development starts. Identifying issues at this stage means you can address them or adjust your approach before significant time and budget has been invested.
The four-step approach below is a simple, repeatable way to identify, prioritise and manage risk without overcomplicating the process.
Start by listing all the potential risks that could impact your social media campaign.
You can begin with a downloadable list of common pharma social media risks (such as those included in our
Mitigating Risk in Pharma Social Media course), then add anything specific to your organisation or strategy. At this stage, the goal isn’t to judge or prioritise, it’s simply to surface everything that could realistically be a risk. Try to think through the lens of your legal or medical review teams so you can proactively address their concerns, and consider how your audience might engage with the campaign.
Once you have your list, take each risk and map it onto a simple grid based on:
You can use a simple risk matrix, like the one shown in our download (illustrated below). This might be on a whiteboard if you are running your workshop in person, or using a tool like Miro or Confluence if you are running it virtually.

Using a risk matrix helps move conversations away from gut feel and toward structured prioritisation. Not all risks are equal, and this step quickly highlights which ones genuinely require action versus those that can be monitored more lightly.
For all risks that fall in either medium or high probability, or medium to high impact, you should then develop:
-
Mitigation strategies: what you can put in place to reduce the likelihood of the risk occurring (for example, content guardrails, approval workflows, moderation rules or training).
-
Contingency plans: what you will do if the risk does occur, including escalation pathways, response timelines and ownership.
Documenting these plans in advance ensures teams can respond calmly and consistently. It can also help to show you review teams you've already planned for areas of concern.