4 BY 4 MATRIX

PROBABILITY/LIKELIHO
NO.
OD
1 LOW/RARE
2 MEDIUM
3 POSSIBLE/LIKELY
4 VERY LIKELY/CERTAIN

NO. SEVERITY/IMPACT PERCENTAGE

1 LOW LESS THAN 25
2 MEDIUM 26 - 50
3 HIGH 51 - 75
VERY 76 - 100
4
HIGH/CATASTROPHIC/EXTREME

NOTE: RISK RATING = SEVERITY/IMPACT × PROBAILITY/LIKELIHOOD

RISK RATING/LEVEL
LEVEL RATE COLOUR CODE
1 TO 4 LOW
5 TO 8 MEDIUM
9 TO 12 HIGH
VERY HIGH/
13 TO 16
CATASTROPHIC

RISK MATRIX 4*4

4 4 8 12 16
PROBABILITY

3 3 6 9 9
2 2 4 6 8
1 1 2 3 4
  1 2 3 4
SEVERITY

Low Risk – Acceptable Risk 1 - 8

High Risk - Requires - Additional Measures - RISK RATING/LEVEL above 8

 3 BY 3 MATRIX

PROBABILITY/LIKELIHO
NO.
OD
1 LOW
2 MEDIUM
3 CERTAIN

NO. SEVERITY/IMPACT PERCENTAGE

1 LOW LESS THAN 33.3
2 MEDIUM 33.4 - 66.6
3 HIGH 66.7 - 100

NOTE: RISK RATING = SEVERITY/IMPACT × PROBAILITY/LIKELIHOOD

RISK RATING/LEVEL
LEVEL RATE COLOUR CODE
1 TO 3 LOW
4 TO 6 MEDIUM
VERY HIGH/
7 TO 9
CATASTROPHIC

RISK MATRIX 3*3

3 3 6 9
PROBABILITY

2 2 4 6
1 1 2 3
  1 2 3
SEVERITY

Low Risk – Acceptable Risk 1 - 6

High Risk - Requires - Additional Measures - RISK RATING/LEVEL above 6

 5 BY 5 MATRIX

NO. PROBABILITY/LIKELIHOOD
1 RARE
2 LOW
3 POSIBLE
4 PROBABLE/LIKELY
CONSTANT/ALMOST
5
CERTAIN

NO. SEVERITY/IMPACT PERCENTAGE

1 INSIGNIFICANT LESS THAN 20
2 MINOR 21 - 40
3 MODERATE 41 – 60
4 MAJOR 61 - 80
5 CATASTROPHIC/EXTREME 81 - 100

NOTE: RISK RATING = SEVERITY/IMPACT × PROBAILITY/LIKELIHOOD

RISK RATING/LEVEL
LEVEL RATE COLOUR CODE
1 TO 4 LOW
5 TO 10 MEDIUM
11 TO 16 HIGH
17 TO 25 VERY HIGH/ CATASTROPHIC

RISK MATRIX 5*5

5 5 10 15 20 25
20
PROBABILITY

4 4 8 12 16
3 3 6 9 9 15
2 2 4 6 8 10
1 1 2 3 4 5
  1 2 3 4 5
SEVERITY

Low Risk – Acceptable Risk 1 - 11

High Risk - Requires - Additional Measures - RISK RATING/LEVEL above 11

RISK – LOG TEMPLATE

  3
 2
 1
Department - Process

 
 
 
Risks

 
 
 
Causes

 
 
 
Existing Controls

 
 
  Likelihood

 
 
 

Impact
 
 
 

Risk Rating
 
 
 

Risk Level/Colour Code

 
 
 

Additional Controls
 
 
 

Probability/Likelihood
 
 
 

Impact
 
 
 

Risk Rating
 
 
 

Risk Level/colour Code

LOW RISKS - No need for Additional Measures/Controls
 
 
 

Monitoring Frequency
 
 
 

Responsibility
HIGH RISKS – AFTER/EXISTING CONTROLS - Need for Additional Measures/Controls