Risk Matrix Heatmap (5 × 5)
Plot project risks by Probability and Impact. Each risk lands in a colour-coded cell so a stakeholder sees the picture at a glance. Saves locally. Export to CSV when you need to share.
Impact →
Probability →
Low (1-4)
Medium (5-9)
High (10-14)
Critical (15-25)
Risk register
#
Risk
Owner
Prob
Impact
Mitigation
Status
How to read the heatmap and what "Risk score" really tells you
Risk score is Probability × Impact, each on a 1 to 5 scale. The colour bands map to standard ISO 31000 zones: 1-4 low, 5-9 medium, 10-14 high, 15-25 critical. Aim to drive everything in red and orange to yellow or green before a release.
A risk register without owners is a wish list. Every row must have an owner. A risk without a mitigation is also a wish list. Every row should have a mitigation, even if it is "accept and document".