RiskNote
Free tool

5x5 risk matrix, free generator

Add your risks, assess likelihood and consequence, and see a colour-coded matrix live. No account required. Built on the same principles as ISO 31000 and most established risk management frameworks.

1
Negligible
2
Minor
3
Moderate
4
Major
5
Catastrophic
5
Almost certain
5
10
15
20
25
4
Likely
4
8
12
16
20
3
Possible
3
6
9
121
151
2
Unlikely
2
4
6
8
101
1
Rare
1
2
3
4
5
↑ LikelihoodConsequence →

Add risk

15
Unauthorised access to customer data
Likelihood: 3 × Consequence: 5 · Critical
12
Key person leaves
Likelihood: 3 × Consequence: 4 · High
10
Ransomware attack
Likelihood: 2 × Consequence: 5 · High

How the tool works

Type a short description of the risk, pick likelihood (1–5) and consequence (1–5), and click “Add”. The risk lands in the right cell of the matrix with a score between 1 and 25. The colour, from olive green (low) to red (critical), shows the severity.

The tool is self-contained: nothing you enter is saved in any database. Close the tab and the data is gone. For a risk register that persists between meetings, switch to RiskNote.

How to read the score

1–3
Low
Acceptable risk, monitor.
4–7
Medium
Watch-listed, consider action.
8–14
High
Needs a structured action plan.
15–25
Critical
Requires immediate action or board decision.

Some examples to start from

If you don't know where to begin, try adding a few of these classic risks:

  • Unauthorised access to customer database (e.g. L=3, C=5)
  • Key person leaves (e.g. L=3, C=4)
  • Ransomware attack (e.g. L=2, C=5)
  • Delayed vendor (e.g. L=4, C=3)
  • Raw material price increase (e.g. L=3, C=3)

Frequently asked questions

What is a 5x5 risk matrix?

A matrix where likelihood and consequence are each assessed on a 1–5 scale. The product (L × C) gives a score between 1 and 25 indicating severity. It's the most common form of risk matrix in ISO 31000-based risk management.

Why 5x5 and not 3x3 or 7x7?

3x3 is too coarse, you only get 9 combinations and lose nuance. 7x7 or larger is rarely practical, assessment becomes harder for humans. 5x5 is the most common choice in practice.

Do you store the data I enter?

No. Everything you enter stays in your browser. Close the tab and the data is gone. No data is sent to RiskNote.

Can I export the matrix?

PNG and PDF export is coming soon to the tool. If you want professional reports today, start a RiskNote trial. Risks are then saved in your account and can be exported with your branding.

How do I read the colours?

Olive green (1–3) = low, yellow-olive (4–7) = medium, orange (8–14) = high, red (15–25) = critical. Exact thresholds can be adjusted to your organisation's risk tolerance.

Ready for more than just a matrix?

RiskNote saves your risks, gives you AI suggestions, a traceable history, and PDF reports for board and auditor. 7-day free trial.