PMC

Learning session

AI Prompting for Finance Analysts

A workshop on prompting large language models for finance work — how the models actually generate text, the CSI-FBI framework for getting useful outputs, when to lean on chain-of-thought and devil's-advocate prompts, where the math caveats live, and how to handle confidential data without leaking it.

Carolina Pereira · PMC VP of Operations17 May 202617 min readBeginnerView original PDF

Most members already use ChatGPT, Claude, Copilot, or Gemini for something — drafting an email, debugging a formula, summarising a 10-K. The gap between casual use and useful use is almost entirely about how the prompt is written. A senior analyst with a sharp prompt gets a defensible draft in two minutes; a junior with a vague one gets a paragraph of plausible-sounding filler and spends the next hour fact-checking it. The difference is not the model. It is the operator.

This session adapts a workshop given to PMC by Mário Silva Pereira (silvapereira.com). It is meant to be practical: a small set of mental models for what these systems actually are, a framework for talking to them, and a handful of habits that make the difference between AI that helps your pitch and AI that quietly puts garbage on your slide.

CSI + FBI

Framework

Six things to specify before you press send

Skills

Reusable

Package repeated prompts once, run them forever

Ollama

Local

Run models on your laptop when the data cannot leave it

How the machine actually works

Before the prompting tactics, the mental model. Most of the bad prompts members write come from a misunderstanding of what is on the other end of the chat box.

Layer 1

Artificial Intelligence

A system that makes predictions from patterns learned in data. Your bank's fraud detector is AI. It does not "think" — it matches historical patterns and scores how unusual a new transaction is.

Layer 2

Generative AI

A subset that produces new content — text, images, code — by predicting the next token, then the next, then the next. It is autocomplete at industrial scale. Your prompt is the seed; the output is what the model judges most statistically appropriate.

Layer 3

Large Language Models

The specific generative models behind ChatGPT, Claude, Gemini, and Copilot. Trained on hundreds of billions of pages — textbooks, filings, earnings calls, papers. They do not know things; they predict them. Garbage in, garbage out.

When you send a prompt, the model does not read it the way you do. It first chops your text into tokens — chunks roughly the size of short syllables or common words — then maps each token to a numerical vector that encodes its meaning. The sentence "The market predicted a return" becomes roughly seven tokens; each token becomes a vector of several thousand numbers; those vectors get processed through dozens of transformer layers; the model outputs a probability distribution over the next token, samples one, and repeats.

Two consequences follow directly. First, every token costs compute — both yours sent in and the model's sent back. That is why API prices are quoted per million tokens, and why longer prompts and longer responses are not free. Second, the model has no privileged access to truth. It has only the statistical residue of its training data, plus whatever you provide in the prompt. If you do not give it the data, it will invent something plausible.

Why finance is well-suited to this

Finance work is unusually exposed to the things LLMs are genuinely good at. Most of what an analyst does in their first two years is data structured into reports, analysis under constraint, and writing for senior readers — and all three are amenable to AI assistance if the prompt is good.

Use case 1

Data & reports

Summarising earnings calls, extracting KPIs from filings, normalising figures into a consistent table format, drafting executive summaries from a long memo.

Use case 2

Analysis

Scenario sketching, sensitivity discussion, peer comp shortlisting, drafting bridge tables, sanity-checking ratios against industry norms.

Use case 3

Decisions under uncertainty

Risk framing, stress-test narratives, regulatory interpretation, counter-arguments to your own thesis.

Use case 4

Writing & communication

Memos, client notes, email drafts, slide titles that state a conclusion rather than label a topic.

None of this replaces judgement. All of it compresses the time between knowing what you want to say and having a defensible draft on the page. The quality of that compression is set, almost entirely, by the prompt.

The quality of your communication with the model is the entire game.

The thesis of the workshop

The CSI-FBI framework

Six elements, every prompt, in roughly this order. The framework is adapted from a model proposed by Nicolas Boucher (nicolasboucher.kit.com) and is the single most useful prompt scaffold the workshop teaches. CSI is the request; FBI is how you want it back.

C

Context

Who are you, what is the situation, who is the reader. "I am a second-year analyst preparing for an internal IC next week" is a different prompt than "I am a sell-side associate writing a public note."

S

Specific

Exact numbers, time periods, constraints. Not analyse costsanalyse Q3 2024 operating costs by category, variance versus budget, flag any line over 10%.

I

Instruction

The task itself, broken into logical steps. Step 1, Step 2, Step 3. Models follow ordered lists much more reliably than wishes embedded in paragraphs.

F

Format

Exactly how the output should look. Table? Memo? Bullet list under 300 words? Executive summary plus appendix? Specify both shape and length.

B

Blueprint

An example of the tone or output you want — or a description of the register ("CFA Level 2 depth, no filler"). Models mirror examples almost perfectly, so a good blueprint is worth more than a long description.

I

Identity

The persona the model should adopt. "You are a senior credit analyst at a Tier 1 European bank" changes the depth and vocabulary of every answer that follows.

The order matters less than the completeness. A prompt that hits all six is rarely shorter than half a page, and that is a feature — the up-front investment is what makes the response usable.

Before and after — the Alstom example

The workshop walks one example end-to-end. The asset is Alstom S.A. (Euronext Paris ticker ALO), a listed European industrials issuer. The task is a credit read ahead of an internal investment committee.

The naive prompt — and what almost every member sends on a first attempt:

Can you analyse this company's financial health? Alstom S.A. (Ticker: ALO — Euronext Paris)

It will get a response. The response will be generic, will hedge on every number, and will not tell you anything you could not have found by typing the ticker into Google.

The CSI-FBI rewrite decomposes the same ask into the six fields:

FieldWhat goes here
ContextA two-year analyst at a mid-size investment firm, reviewing a listed European manufacturer ahead of an internal investment committee next week.
SpecificLiquidity risk and leverage, FY2022–FY2025 figures, plus any recent 2026 data and news.
InstructionAssess whether leverage and liquidity represent a material risk to debt service over the next 12 months. Flag red flags versus investment-grade thresholds.
Format(1) Three-sentence executive summary. (2) KPI table with benchmarks. (3) Key risks as bullets. (4) Recommendation: pass / watch / avoid.
BlueprintCFA Level 2 depth. Precise financial language. Direct, no filler.
IdentitySenior credit analyst at a Tier 1 European bank, specialising in industrials. Reader is a PM with 15 years of experience.

The CSI-FBI version gets a tightly-structured response with named ratios, a verdict, and risks framed against credit thresholds the reader will recognise. Same model. Same minute of work. Materially more useful output.

Sharpening the loop

CSI-FBI gets you a usable first draft. Three additional techniques turn it into something defensible.

Devil's advocate

The default failure mode of an LLM is confirmation. Ask it whether your thesis is right and it will, with caveats, tell you it is. The fix is to instruct it explicitly to argue the other side.

A clean devil's-advocate prompt asks the model to surface counter-arguments, blind spots, alternative interpretations of the data, and the strongest version of the opposing case. The point is not to settle the debate — you do that with your own judgement. The point is to make sure the bear case got fair play before the slide is final.

Chain-of-thought

Generic answers skip steps, hide assumptions, and make silent maths errors. The cure is to require the model to show its working — step by step, formula by formula, assumption by assumption. The technique is called chain-of-thought (CoT).

A worked example: a project costs €10,000 today and returns €4,000 per year for three years at an 8% discount rate. Calculate the NPV and show your reasoning step by step. The CoT response will:

  1. Identify each cash flow and its year.
  2. State the discount factor formula and apply it to each year.
  3. Compute the present value of each inflow.
  4. Sum the inflows and subtract the initial investment.
  5. State the final NPV and flag any rounding.

The arithmetic is the same. The value is the audit trail. When the model is wrong — and on multi-step maths it sometimes is — you can find the line where it went wrong and correct it, rather than discarding the whole answer.

Clearing context

Long conversations accumulate context. By turn fifteen, the model is silently weighting everything you said in the first ten turns — including the assumptions you have since moved past. The result is context drift: responses get less focused, less specific, more contaminated by earlier framings.

The fix is simple. When you change topics or notice the responses degrading, start a new chat (or use /clear if your client supports it) and restate the objective, the constraints, and the desired output cleanly. The two minutes you spend rebuilding context are repaid in sharper responses for the next half hour.

Working language — Portuguese or English?

Modern LLMs are not separate per-language models; they are one multilingual system with most of their training data in English. That asymmetry has practical consequences for which language to prompt in.

TopicUse
Local legal, tax, or bureaucratic detailPortuguese
Slang, cultural nuance, idiomatic registerPortuguese
Programming, technical reference, library usageEnglish
Academic finance, scientific explanation, research summarisationEnglish

The rule of thumb is straightforward: prompt in the language with more high-quality training data on the specific topic. For PMC's work, that is English for almost everything technical and Portuguese only when local context is genuinely the point.

Skills — packaging the prompts you reuse

After you have written the same CSI-FBI scaffold five times, you should not be writing it a sixth. Modern AI clients (Claude is the most polished example) support skills — packaged instruction sets that load automatically when relevant, so the next prompt can be a single sentence.

A skill is, conceptually, just a saved prompt with a trigger condition. It contains:

Element 1

Description

Name and a clear trigger condition. "Credit Risk Memo — use when the user asks for a memo on a corporate issuer's credit profile."

Element 2

Instructions

The step-by-step process the model should follow. Output structure, interpretive rules, language register.

Element 3

Examples

One or two sample inputs and the gold-standard output you expect. Models mirror examples — a good one teaches more than a long instruction list.

Element 4

Testing

Iterate. Run the skill on new cases, find where it falls short, refine the instructions, repeat. A skill that works on three examples but breaks on the fourth is a skill that is not finished.

A representative example — the kind of skill a credit analyst would build once and use for the rest of the semester — looks roughly like this:

FieldSpecification
TriggerWhen the user asks for a credit memo on a corporate issuer.
Output structure(1) Risk assessment. (2) Key credit risks, max 3 bullets. (3) Covenant recommendations.
Interpretation rulesLeverage above 3.0× = elevated risk. Interest coverage below 2.5× = weak buffer. Revenue decline = early warning.
ToneSenior credit risk officer at a commercial bank. Conservative language — deteriorating trend, limited headroom, heightened breach risk.
LengthUnder 300 words.

Once packaged, the analyst types "Run Credit Risk Memo on issuer X" and gets a memo in the firm's house style. The thirty minutes spent building the skill is paid back the second time it is used.

Privacy — what you put in, you have given away

The single largest risk in using AI tools at PMC is leaking material you should not have shared. The free tiers of every consumer chatbot train on user inputs by default, retain conversations for indefinite periods, and offer no enterprise-grade controls. The risk is not theoretical — it has happened at large firms with material consequences.

The defence is layered. Most of it is operator discipline, not tool selection.

Layer 1

Do not upload what you cannot afford to lose

Confidential documents, signed NDAs, full earnings drafts, anything under embargo — these do not belong in a consumer chat box. The bar is "would I email this to a stranger?" If no, do not paste it.

Layer 2

Strip and reduce

Remove document metadata (MS Office Inspect Document, exiftool). Reduce semantic specificity where it does not change the question — "profit of €127.4M" becomes "a significant profit" if the exact number is not needed.

Layer 3

Anonymise

Strip names, tickers, and identifying detail when only the structure of the analysis matters. Tools like presidio and spaCy automate this for larger documents.

Layer 4

Disable training and sharing

In every consumer client, opt out of training-on-your-data and turn off conversation sharing. Prefer Enterprise tiers — they ship with these defaults inverted and with admin controls.

For genuinely sensitive work — anything under NDA, anything pre-earnings, anything that would embarrass PMC if it leaked — the right answer is not to use a consumer chatbot at all. Run a model locally instead.

Running a model on your laptop

Ollama is the standard tooling for local LLMs. Combined with Docker, it gives you a model that runs entirely on your machine — no API calls, no logs on someone else's servers, no training on your input.

The whole setup is three commands. Install Docker from the official site, then in a terminal:

# Pull and run Ollama in a Docker container
docker run -d -v ollama:/root/.ollama -p 11434:11434 \
  --name ollama ollama/ollama

# Run a model interactively
docker exec -it ollama ollama run llama3.2
>>> <your prompt here>
>>> /bye

Local models trade some quality for total privacy. For sketching, summarising, and reformatting, modern 7-to-13-billion-parameter models are good enough. For final analytical work on a real deal, the quality gap with frontier models still matters — but for anything genuinely sensitive, "good enough on your laptop" beats "excellent in someone else's logs."

Where this is heading — agentic AI

Up to this point everything has been conversational — you ask, the model answers, you decide what to do next. The next layer, increasingly real, is agentic: AI that not only answers but acts. Reads your inbox. Schedules the meeting. Drafts the reply. Browses the website. Runs the script.

A representative example, drawn from the workshop, is the OpenClaw project (openclaw.ai) — an open-source local agent platform that combines a chat interface with browser automation, file-system access, and persistent memory. A single instruction like "review my unread emails, summarise the urgent finance requests, schedule a meeting with the professor tomorrow afternoon, and prepare a draft reply" becomes a multi-step plan that the agent executes, surfacing the draft for your approval.

Agentic tooling is moving fast and the failure modes are not yet well understood. For PMC work, the conservative posture is: experiment with these tools on low-stakes personal tasks (calendar, inbox triage, research scraping) and let the high-stakes finance workflows mature on the conversational side before moving them to autonomous execution.

What to take into your next prompt

Six habits that, taken together, separate analysts who get useful output from analysts who get plausible filler.

Habit 1

Write CSI-FBI before you press send

Context, Specific, Instruction, Format, Blueprint, Identity. If your prompt is shorter than half a page, it is probably too short.

Habit 2

Verify every critical number

LLMs make silent maths errors. For anything that lands in a model, a memo, or a slide, recompute independently — or have the model generate a script you can audit.

Habit 3

Ask for the bear case

Default outputs confirm. Devil's-advocate prompts surface the counter-arguments your slide needs to survive review.

Habit 4

Show the working with CoT

For anything multi-step, require chain-of-thought. The audit trail is the value, not just the answer.

Habit 5

Package what you reuse

Build skills for the prompts you write more than twice. The investment compounds across the semester.

Habit 6

Keep the confidential off the public clients

Strip, anonymise, reduce. For anything genuinely sensitive, run a local model.

These models do not think. They predict. The quality of your prompt is the quality of the prediction you get back.

The closing thought

The original workshop deck is linked at the top of this page. Open it for the diagrams — the token-to-vector walkthrough and the privacy matrix in particular are worth reading in their original form.