IT Risk Assessment Matrix Template

This matrix template helps assess risks by likelihood and impact, prioritise mitigation, and assign ownership. Use this tool during planning sessions or internal reviews.

🧾 Key Sections to Include

• Risk Description: What could go wrong?
• Impact: If it happens, how severe is the effect?
• Likelihood: How probable is the event?
• Controls: What’s already in place? What’s missing?
• Responsibility: Who owns this risk?
• Timeline: When should actions be taken?

🎯 Example Categories

• Cybersecurity
• Backup and Recovery
• Vendor Dependencies
• Regulatory Compliance
• Hardware Failures
• User Behaviour & Awareness

📈 Scoring Tips

• Use a 1–5 scale for both impact and likelihood
• Multiply scores to calculate risk level (1–25)
• Classify as Low (1–8), Medium (9–15), High (16+)