Once risks are identified, they must be prioritized to guide corporate attention and resource allocation. Historically, organizations used subjective 5×5 heat maps where risks were plotted based on vague criteria like “Low,” “Medium,” or “High.” Modern risk management requires quantitative calibration for both probability and financial impact axes.
       5 │ [Amber]   [Amber]   [Red]     [Red]     [Red]     ◄── Critical Escalation Threshold
P      4 │ [Green]   [Amber]   [Amber]   [Red]     [Red]
R      3 │ [Green]   [Green]   [Amber]   [Amber]   [Red]
O      2 │ [Green]   [Green]   [Green]   [Amber]   [Amber]
B      1 │ [Green]   [Green]   [Green]   [Green]   [Amber]
         └─────────────────────────────────────────────────
             1         2         3         4         5
                        F I N A N C I A L   I M P A C T

To build a metrics-driven calibration matrix, each axis score must correspond to specific, objective organizational thresholds:
  • Probability Calibration Scales:
    • Score 1 (Remote): Expected to occur less than once every 10 years.
    • Score 3 (Possible): Expected to occur once every 12 to 24 months.
    • Score 5 (Frequent): Expected to occur multiple times within a single quarter.

  • Financial Impact Calibration Scales:
    • Score 1 (Negligible): Financial loss under $10,000; absorbed within local operating budgets.
    • Score 3 (Moderate): Financial loss between $500,000 and $2,000,000; triggers immediate Line-2 notification.
    • Score 5 (Catastrophic): Financial loss exceeding $25,000,000; threatens capital tier-1 reserve adequacy.


Â