GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in

Free tool

5x5 risk matrix calculator

Choose the likelihood and the impact of a risk: the score is their product, and the matrix shows where it sits. No account needed.

9Moderate
Likelihood (rows) by impact (columns). Your risk is outlined.
LikelihoodNegligibleMinorModerateMajorSevere
Almost certain510152025
Likely48121620
Possible3691215
Unlikely246810
Rare12345

How to read it

The levels here are Low (1 to 4), Moderate (5 to 9), High (10 to 14) and Critical (15 to 25). Write down what each level of likelihood and impact means in your company, so that two people score the same risk alike.

Questions

How is a risk score calculated?
On a 5x5 matrix, the score is the likelihood (1 to 5) multiplied by the impact (1 to 5), which gives a value from 1 to 25.
What score is a high risk?
Here, 10 to 14 is High and 15 to 25 is Critical. These bands are a common starting point: set your own criteria before you assess.
Is a low risk accepted automatically?
No. A level never decides on its own: even a low risk is accepted only by its risk owner, and that decision is recorded.
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact