Risk matrix

Probability vs impact with live response strategies.

Drag a dot to re-score it. Click a dot or row for details.
Probability
Impact
Click a dot to see its response strategy.
RiskPIScoreTrendOwner

What you are looking at

A 5x5 grid where probability meets impact. The risk score is probability times impact, ranging from 1 to 25. Green cells (1 to 3) require passive monitoring. Amber cells (4 to 8) need an assigned owner and response plan. Red cells (9 to 15) require sponsor escalation. Deep red cells (16 to 25) demand immediate action. Click any dot for response strategy and recommended action. The register sorts by score, highest first.

What most PMs miss

Risks are scored at kickoff and never updated. A risk matrix is a living document — stale risks are worse than no matrix at all. The trend column is the most important addition most PMs skip: a risk moving from stable to worsening week on week is often more urgent than its current score alone suggests.

The expert tip

For every red or critical risk, write a specific trigger event — a measurable condition that automatically activates the response plan. Not 'if the developer leaves we will hire a replacement' but 'if the developer gives notice before week 8 we engage the backup contractor within 24 hours.' Triggers turn a risk register from a document into an early warning system.