Inherent Risk Matrix
IMPACT (5-1)
1
2
3
4
5
LIKELIHOOD (1-5)
* Click on a cell in the heatmap to filter the risk table by score coordinates.
Risk Matrix Guidelines
Risk Formulas
- Inherent Risk: Likelihood × Impact (1 - 25)
- Residual Risk: Inherent Risk - Control Reduction
Action Thresholds
- Score ≥ 20: Critical (Immediate attention)
- Score ≥ 12: High (Remediate in 30 days)
- Score ≥ 6: Medium (Plan mitigation)
- Score < 6: Low (Monitor status)
Compensating Reduction Model: Mapped controls default to a 40% reduction weight to likelihood score in residual calculation, simulating functional control defense against external threats.
Risk Inventory
| Risk ID | Risk Description | Control Reference | Inherent Score | Residual Score | Mitigation Status | Actions |
|---|