A risk matrix is a tool used to map risks.  As a visual aid they are helpful for senior management reporting and staff training.    An example of a risk matrix is provided below.

A matrix can be used to map the gross, net and target risk -

• Gross risk represents inherent risk;

• Net risk represents the risk after controls have been put in place;

• Target risk represents ongoing monitoring and reporting.