Skip to content

Risk-element values: scores, colours and statuses

This page gives the exact rules behind the values of a risk element in a risk analysis: which numbers probability and consequence can take, what a risk-type cell shows, how its colour is chosen, the limits of Sum, and the order in which statuses are sorted. How to set the values is described in Assess original and residual risk, and what Sum means, with an example, in Understand original risk, residual risk and Sum.

Probability, consequence and the value in a cell

Section titled “Probability, consequence and the value in a cell”

The rules apply in the same way to the original risk (Risk analysis) and the residual risk (Residual risk) of a risk element.

Rule Detail
Probability For a risk element and one risk type, the probability is the number of the column chosen in the risk picker: 1 for the leftmost column, up to the number of columns in the analysis’s matrix.
Consequence For a risk element and one risk type, the consequence is the number of the row chosen in the risk picker: 1 for the bottom row, up to the number of rows for the top row.
Matrix size A matrix has 1 to 10 columns, 1 to 10 rows and up to 10 risk-type tabs; see Set up risk matrices.
Value in a risk-type cell Probability × consequence for that risk type. The lowest value is 1 and the highest is the number of columns × the number of rows: 25 in a matrix with 5 columns and 5 rows, and never more than 100.
Same value, different cells Different cells can give the same value. In a 5 × 5 matrix, probability 2 with consequence 3 and probability 3 with consequence 2 both show 6. To see which cell was chosen, open the risk picker for that risk type.
Sum For a risk element, the original Sum is the values of all risk types in its original risk added together, and the residual Sum is the same for its residual risk. A risk type without a value adds nothing. The highest possible Sum is the number of risk types × columns × rows: for example 4 × 25 = 100 for four risk types in a 5 × 5 matrix.
Rule Detail
Source of the colour For a risk element and one risk type, the cell’s colour in the table is the colour of the matrix cell at its probability and consequence. The colour belongs to the matrix cell, not to the value, so two cells with the same value can have different colours.
Risk types with their own colours If the matrix gives a risk type its own colours (“Different colour palette”), that risk type’s cells use them. Otherwise every risk type uses the colours of the first tab.
Matrix version An analysis shows the colours of the matrix version it uses. The heat map uses the latest version, so its colours can differ; see The risk heat map.
Charts and exports Charts stack their bars by the same colours; see The graphical analysis page. The analysis export fills the value cells with the matrix colours; see Excel exports in Risk management, column by column.

A matrix named “Default” (see Set up risk matrices) is created automatically when Risk management is switched on for your company. It has 5 columns, 5 rows and four risk types, for personnel, assets, the environment and reputation. It is created with Translation on, so its texts are kept separately in English and Norwegian, and with Default matrix switched on, so it is preselected in the form for a new risk analysis until another matrix is made the default matrix. Its colours at creation run from green at low probability and consequence, through yellow, to red at high probability and consequence. Users with the Admin right on the Risk management row can change its texts, colours and settings later, but not its name or size.

When you sort the risk-element table by Status, the statuses come in this order, in every interface language:

Position (ascending) Status
1 Actions completed
2 Actions in progress
3 No action
4 Open
5 Pending

Sorting descending reverses the order. The order is fixed and does not follow the alphabetical order of the status names you see.

The search box above the table compares your text with a fixed English name of each status, not with the status names you see: a word such as “open” can find risk elements by their status, while the Norwegian status names never do. What else the search matches is listed in The risk-element table. To find risk elements by status, use the status filter in the Status heading instead, which is described on the same page.

What sets each status is described in Follow up a risk element with actions, and which statuses can be deleted in Copy, reorder, flag and delete risk elements.