How the Score Works
Every risk is scored on two axes: likelihood and impact, each rated from 1 to 5. The score is likelihood multiplied by impact, giving a value from 1 to 25.
Level Bands
Scores map to four level bands:
- Low: 1 to 4
- Medium: 5 to 10
- High: 11 to 15
- Critical: 16 to 25
Inherent versus Residual
Inherent exposure is the risk before treatment. Residual exposure is the risk after your controls are considered. The register and heatmap focus on residual exposure because it reflects your real position today.
Reading the Heatmap
The heatmap arranges active risks on a 5 by 5 grid by residual likelihood and impact. Each cell is coloured by its level band, and the number in a cell shows how many risks fall there. Select a cell to drill into the risks it contains.