Risk Matrix Generator

Visualize and classify project risks with an interactive heat map. Choose the matrix size, enter your risk items, and get a level-based auto-classification.

Matrix configuration

Size:
2Reviewers
1Tall
0Medium-sized
0Low frequencies

Hazards

  • Critico
  • Alto
  • Critico

Heatmap 4x4

4
8
M
12
16
3
6
9
R
12
2
4
6
8
1
2
3
4
Low
Medium
High
Critical

Prioritize risks by priority

  1. 1
    Ritardo nella consegna
    Score: 12P=3 × I=4
    Critico
  2. 2
    Mancanza di risorse
    Score: 12P=4 × I=3
    Critico
  3. 3
    Bug critico in produzione
    Score: 10P=2 × I=5
    Alto

Come utilizzare Generatore Matrice dei Rischi

Choose matrix size (3x3, 4x4 or 5x5)

Choose granularity of probability scale and impact. A 5x5 matrix offers more precision, a 3x3 is easier to communicate with non-technical stakeholders.

Insert risks with probability and impact

For each identified risk assign a probability value (from 1, improbable, to the maximum scale, very probable) and an impact value (from 1, negligible, to the maximum, catastrophic).

Read the heat map and risk level

Every risk is automatically placed on the colored heatmap (green/low, yellow/medium, orange/high, red/critical) based on product probability of impact relative to matrix size.

Assess priority rankings and plan mitigation measures

Risks are automatically sorted by decreasing score: use this ranking to decide which risks to prioritize for initial mitigation actions and export data to CSV.

Suggerimenti

  • Review the risk matrix periodically during the project: probabilities and impact change over time, a low-risk early on can become critical later.
  • Don't just fill out the matrix once: use it as a living tool in retrospectives and status meetings to track risk evolution.
  • Assign an owner to each identified risk, not just a score: a risk without a responsible person is rarely mitigated in time.

Domande frequenti

How is the risk score calculated in the matrix?

Risk score is the product of probability and impact (score = probability multiplied by impact), both expressed on a numerical scale from 1 to the chosen maximum value for the matrix (3, 4 or 5). A risk with a probability of 4 and an impact of 5 on a 5x5 scale has a score of 20, the maximum possible value on that matrix.

How are risk levels defined between low, medium, high, and critical?

The tool classifies risks based on the ratio of the score obtained to the theoretical maximum score in the matrix (square size): below 16% of the maximum is Low, between 16% and 36% is Medium, between 36% and 64% is High, above 64% is Critical. These percentage thresholds automatically adjust by changing the matrix size (3x3, 4x4 or 5x5).

What is the difference between probability and impact in a risk analysis?

Probability estimates how likely it is that the risk will materialize within a certain time frame (e.g. low probability for rare events, high for almost certain ones). Impact estimates instead the consequences if the risk were to actually materialize, in terms of costs, delays, reputational damage or safety risks, regardless of how probable it is.

Should you use a 3x3, 4x4 or 5x5 matrix?

A 3x3 matrix is simpler to communicate and suitable for rapid workshops or non-technical stakeholders, but compresses too many different risks in the same range. A 5x5 matrix offers greater granularity and allows for better differentiation of similar risks, at the cost of requiring more precise probability and impact estimates. The 4x4 is a common compromise in enterprise and IT project management.

What to do when a risk is rated "Critical" in the matrix?

A critical risk requires immediate mitigation planning and visibility to stakeholders or project sponsors: typically defined are actions to reduce probability (prevention), actions to reduce impact (contingency plan) and an owner responsible for continuous monitoring, with review of the matrix at more frequent intervals than low or moderate risks.