
Risk assessment matrix (5x5) template
5x5 grid with scores and colour bands · Eight plotted risks with owners · A response rule for each band
Preview and use template →A risk register is the running list of risks an organisation is managing. This board turns the usual spreadsheet into something you can read at a glance: each risk is a bar from its inherent score, before any controls, to its residual score after current controls, drawn against a red risk appetite line. Owner, trend, next review date and status sit on the same row.
This is a planning example, not legal advice. Check your own policies, advisers and the local rules that apply to you.
No account needed · Opens as your own editable page

Give every risk one named owner and a short, specific title. A risk without an owner does not get managed.
Score the inherent risk with no controls, then the residual risk with the controls that actually work today. The gap shows how much your controls are doing.
Draw your appetite line. Any residual score to the right of it needs a new treatment with a date, or a recorded decision to accept it.
The first is the inherent score before controls and the second is the residual score after them. Compare the residual score with the appetite line to set the status.
No. Open the template and edit it in your browser. Your work saves on this device. An account is optional if you want to sync your workspace.
Yes. Use Export in the editor to save a PNG, SVG or PDF, or download an editable .epicdraw backup.