Risk Heatmap Calculator
Place a risk on a 3×3, 4×4 or 5×5 heatmap with multiplicative or additive scoring, and see the zone, quadrant and appetite verdict.
About Risk Heatmap Calculator
Multiplicative scoring spreads risks out and pushes anything with a severe impact towards the top, while additive scoring compresses the range and treats a rare catastrophe much like a frequent nuisance. Both are shown against the same appetite line so you can see how much of the answer comes from the scoring convention rather than from the risk, and the red-cell count exposes whether the matrix itself is generous. Heatmaps drive real funding decisions, and two teams using the same words with different matrices routinely rank the same risk two zones apart. It is a communication and prioritisation tool producing management estimates, not a measurement.
Formulas
Risk Heatmap
Score = likelihood × impact (multiplicative) or likelihood + impact (additive); the maximum is size² or 2 × size respectively, and the zone is read off the score as a share of that maximum.
- size
- Matrix dimension, 3, 4 or 5
- score
- Position of the risk in the matrix
- maxScore
- Top-right cell of the matrix
Matrix geometry
Red-zone cells are those scoring at least 70% of the maximum; the percentile counts how many of the size² cells score at or below this risk.
- redCells
- How many of the cells are extreme, which shows how coarse or generous your matrix is
- percentile
- Where this risk sits among all possible cells
Worked example
With the default values below, Risk Heatmap Calculator returns Risk Score of 20. Change any input above and every figure here is recalculated in your browser.
Inputs used
- Matrix sizeone of 3×3 — nine cells, 4×4 — sixteen cells, 5×5 — twenty-five cells
- 5×5 — twenty-five cells
- Likelihoodone of 1 — Rare, 2 — Unlikely, 3 — Possible, 4 — Likely, 5 — Almost certain
- 4 — Likely
- Impactone of 1 — Insignificant, 2 — Minor, 3 — Moderate, 4 — Major, 5 — Severe
- 5 — Severe
- Scoring methodone of Multiplicative — likelihood × impact, Additive — likelihood + impact
- Multiplicative — likelihood × impact
- Appetite line — treat above this scoreaccepts 1–25 points
- 12 points
Results
- Risk Score
- 20 points
- Share of the Maximum Score
- 80.0%
- Maximum Possible Score
- 25 points
- Cells in the Red Zone
- 3 cells
- Cells at or Below This Score
- 96%
- Matrix Cell
- L4 × I5 on a 5×5 matrix
- Heatmap Zone
- Red — extreme, escalate now
- Quadrant Strategy
- High likelihood, high impact — mitigate, and expect this to be the most expensive quadrant
- Appetite Verdict
- Above the appetite line — treatment required or formal acceptance with sign-off
Step by step
- 1Values used
- 2Risk Heatmap
- 3Matrix geometry
- 4Risk Score= 20 points
- 5Share of the Maximum Score= 80.0
- 6Maximum Possible Score= 25 points
- 7Cells in the Red Zone= 3 cells
- 8Cells at or Below This Score= 96
- 9Matrix Cell= L4 × I5 on a 5×5 matrix
Assumptions and limits
- The result is derived only from the 5 inputs listed above. Anything not among them is not part of the calculation.
- In particular, this calculator does not take inflation, tax, fees or charges or compounding frequency into account.
- Figures are rounded for display to 1 decimal place, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.
How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.
Frequently Asked Questions
How is Risk Heatmap calculated?
Score = likelihood × impact (multiplicative) or likelihood + impact (additive); the maximum is size² or 2 × size respectively, and the zone is read off the score as a share of that maximum. Multiplicative scoring spreads risks out and pushes anything with a severe impact towards the top, while additive scoring compresses the range and treats a rare catastrophe much like a frequent nuisance. Both are shown against the same appetite line so you can see how much of the answer comes from the scoring convention rather than from the risk, and the red-cell count exposes whether the matrix itself is generous.
Why does Risk Heatmap matter?
Heatmaps drive real funding decisions, and two teams using the same words with different matrices routinely rank the same risk two zones apart. It is a communication and prioritisation tool producing management estimates, not a measurement.
What values do I need to enter?
This calculator takes 5 inputs: Matrix size, Likelihood, Impact, Scoring method, Appetite line — treat above this score. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Multiplicative or additive scoring?
Multiplicative is the common default and is better at surfacing severe-impact risks, but it creates gaps — no cell scores 7, 11 or 13 on a 5×5 — and exaggerates differences at the top. Additive is smoother and easier to explain, at the cost of treating a rare catastrophe like a routine annoyance. Pick one, write it in the methodology and never mix them in one register.
Is a 5×5 matrix better than a 3×3?
Only if your inputs justify the resolution. Five likelihood levels imply you can distinguish rare from unlikely with evidence; if you cannot, the extra granularity is false precision and a 3×3 will produce more honest and more consistent scoring across assessors.
Related Calculators
You might also need
- Inherent Risk CalculatorCommonly used together
- Risk Register CalculatorCommonly used together
- Risk Priority Number CalculatorCommonly used together
- Residual Risk CalculatorAlso in Compliance & GRC
- Disaster Recovery RTO CalculatorAlso in Compliance & GRC
- Security Investment ROI CalculatorAlso in Compliance & GRC
