
Risk register with inherent and residual scores template
Eight risks with owners and review dates · Inherent to residual bars on one scale · Risk appetite line and status flags
Preview and use template →A 5x5 risk assessment matrix scores every risk the same way: how likely it is, and how bad it would be. This example plots eight business risks on the grid, from a personal data breach to a contract that auto-renews unnoticed, lists each one with its score and owner, and shows what each colour band means in practice, from accept and review yearly to escalate to the board.
This is a planning example, not legal advice. Check your own policies, advisers and the local rules that apply to you.
No account needed · Opens as your own editable page

Write down what each likelihood and impact level means for your organisation, in money, people and regulatory terms. Without this, two people will score the same risk differently.
Score each risk as it stands today, with the controls you already have, and place it on the grid. Use a numbered dot so the list beside the grid carries the detail.
Decide what each band triggers and who must act. Show a target score for any risk you plan to reduce, so the plan is visible on the same page.
It shows where risk R2 should land once its planned controls are in place. Add a dashed marker for any risk where you want to show its target score.
No. Open the template and edit it in your browser. Your work saves on this device. An account is optional if you want to sync your workspace.
Yes. Use Export in the editor to save a PNG, SVG or PDF, or download an editable .epicdraw backup.