Risk matrix

A risk matrix is a matrix that is used during risk assessment to define the level of risk by considering the category of likelihood (often confused with one of its possible quantitative metrics, i.e. the probability) against the category of consequence severity. This is a simple mechanism to increase visibility of risks and assist management decision making.

The risk matrix has been widely used across various sectors such as the military, aviation, pharmaceuticals, maintenance, printing and publishing, cybersecurity, offshore operations, electronics, packaging, and industrial engineering. Several recent studies have shown that the assessment of risk matrices has increasingly shifted from qualitative to quantitative methods, particularly in manufacturing and production processes.