Who is this article for?

Users who need to understand the Risk Matrix.

No special access or permissions are required.

The Risk Matrix provides a visual representation of inherent and residual risk scores across entities, automatically calculating grades based on likelihood and impact combinations.

1. Understanding risk scoring and grading

Each Entity Risk Assessment allows you to rate specific risks based on the likelihood of occurrence and the potential impact. The system automatically calculates both inherent and residual risk scores, with the residual score accounting for the effect of any mitigating controls.

The resulting risk scores are graded according to a heat map, where different score combinations produce different grades and colours for easy visual identification.

2. Viewing risks in the Navigator

When you select the Navigator, it displays the number of inherent and residual risks for all entities contained within that navigator level. Each coloured cell in the matrix shows the number of risks with that particular likelihood and impact score combination.

To view detailed information about risks:

1. Click on a cell in the matrix to display a summary in the Data Grid of the risks with that particular score.
2. Hover your mouse over a cell to see where those risks appear on the other matrix.

Below the matrix, an unassessed field displays the count of risks that have not been assessed. Click on this field to view a summary list of those unassessed risks.

3. Copying the Risk Matrix

The copy function available on the ribbon provides an easy method to transfer the risk matrix to your clipboard, allowing you to paste it into other documents such as Microsoft Word.

4. Using Risk Matrix icons

The Risk Matrix includes various icons to help you navigate and interact with the data effectively.