How do I use a Probability and Impact Matrix to prioritize risks effectively?

All answers to this question.

To make the P-I Matrix effective, you must define your scales before you start scoring. For 'Impact,' use specific project constraints. For example, 'High' could be a budget increase of >10% or a delay of >1 month. 'Medium' could be 5-10% budget or 2 weeks delay. For 'Probability,' use percentages: 'High' is >70%, 'Medium' is 30-70%, etc. Once these definitions are agreed upon by stakeholders, you simply plot each risk. The ones in the red zone (High P, High I) get immediate attention and a formal response plan, while the ones in the green zone (Low/Low) just go on a watch list for future reviews.

   Answered 2025-05-17 by Lisa Anderson

How do you handle "High Impact, Low Probability" risks in your matrix? I find teams often ignore them because they are in the 'Yellow' zone, but as we saw with the global pandemic, those are the ones that actually sink companies. Should they be weighted differently?

   Answered 2025-05-19 by Robert Moore

• Robert, that’s a common pitfall. We actually use a 'Criticality Score' (P multiplied by I). However, for 'Low P / High I' risks, we maintain a separate 'Top 10' list regardless of the score. This ensures that even if the math says it's medium, the executive team stays aware of the "company-killers."

     Commented 2025-05-21 by Jennifer Davis

Consistency is key. If three different people score the same risk differently, your matrix is broken. Spend time calibrating the team's understanding of "High" before the workshop begins.

   Answered 2025-05-23 by Steven Harris

• Exactly, Steven. I usually provide a 'Risk Scoring Guide' sheet during the meeting so everyone is literally on the same page. It cuts down on the debating time by about 50%.

     Commented 2025-05-25 by Lisa Anderson