#Risk assessment

Cybersecurity risk matrix: how to build likelihood and impact scales

Two departments assess the same ransomware risk: one scores it 20, the other 8. Both scores come from the same 5×5 matrix; each department simply reads the word “likely” differently. A risk matrix produces comparable results only when every level of each scale is defined and the rule for combining likelihood and impact is written down.