Risk Matrices

For each initial and residual risk, matrices in the heat map style show a number of threat scenarios with that risk.

The number in each matrix cell indicates the number of threat scenarios with a corresponding risk value. A comparison of two matrices yields an overview of how the risks have shifted. The risks can only shift in the vertical direction (from top to bottom) since a security control can only influence the AFR, not the impact of a threat scenario.

By clicking on a risk field, the corresponding threat scenarios are listed with detailed information in the table below. The initial and residual risk columns compare and show each threat scenario’s initial and residual risks.