A risk matrix is a tool used to map risks. As a visual aid they are helpful for senior management reporting and staff training. An example of a risk matrix is provided below.
A matrix can be used to map the gross, net and target risk -
Gross risk represents inherent risk;
Net risk represents the risk after controls have been put in place;
Target risk represents ongoing monitoring and reporting.