Once risks are identified, they must be prioritized to guide corporate attention and resource allocation. Historically, organizations used subjective 5×5 heat maps where risks were plotted based on vague criteria like “Low,” “Medium,” or “High.” Modern risk management requires quantitative calibration for both probability and financial impact axes.
5 │ [Amber] [Amber] [Red] [Red] [Red] ◄── Critical Escalation Threshold
P 4 │ [Green] [Amber] [Amber] [Red] [Red]
R 3 │ [Green] [Green] [Amber] [Amber] [Red]
O 2 │ [Green] [Green] [Green] [Amber] [Amber]
B 1 │ [Green] [Green] [Green] [Green] [Amber]
└─────────────────────────────────────────────────
1 2 3 4 5
F I N A N C I A L I M P A C T
To build a metrics-driven calibration matrix, each axis score must correspond to specific, objective organizational thresholds:
- Probability Calibration Scales:
- Score 1 (Remote): Expected to occur less than once every 10 years.
- Score 3 (Possible): Expected to occur once every 12 to 24 months.
- Score 5 (Frequent): Expected to occur multiple times within a single quarter.
- Financial Impact Calibration Scales:
- Score 1 (Negligible): Financial loss under $10,000; absorbed within local operating budgets.
- Score 3 (Moderate): Financial loss between $500,000 and $2,000,000; triggers immediate Line-2 notification.
- Score 5 (Catastrophic): Financial loss exceeding $25,000,000; threatens capital tier-1 reserve adequacy.
Â