ThalewynThalewyn
  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
FeedbackSign inGet started
  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • Share feedback
  • Sign in

5x5 risk matrix calculator

Choose the likelihood and the impact of a risk: the score is their product, and the matrix shows where it sits.

9Moderate
Likelihood (rows) by impact (columns). Your risk is outlined.
LikelihoodNegligibleMinorModerateMajorSevere
Almost certain510152025
Likely48121620
Possible3691215
Unlikely246810
Rare12345

How to read it

The levels here are Low (1 to 4), Moderate (5 to 9), High (10 to 14) and Critical (15 to 25). Write down what each level of likelihood and impact means in your company, so that two people score the same risk alike.

Questions

How is a risk score calculated?
On a 5x5 matrix, the score is the likelihood (1 to 5) multiplied by the impact (1 to 5), which gives a value from 1 to 25.
What score is a high risk?
Here, 10 to 14 is High and 15 to 25 is Critical. These bands are a common starting point: set your own criteria before you assess.
Is a low risk accepted automatically?
No. A level never decides on its own: even a low risk is accepted only by its risk owner, and that decision is recorded.
Thalewyn

Governance, risk, compliance and IT operations services whose deliverables feed each other.

Product

  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • About
  • Free tools

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© Thalewyn

  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ