Core concepts

How risk is scored

Every risk in the platform is scored the same way — a severity multiplied by a likelihood, banded into a tier. Understanding this makes the rest of the platform obvious.

The calculation

Each consequence is given two values, and the score is their product:

score = severity level × likelihood level

On a 5×5 matrix that yields scores from 1 to 25. The score then falls into a tier — Low, Medium or High — according to the bands your company configured.

TierDefault bandMeaning
Low1–4Acceptable risk within normal operations.
Medium5–12Mitigation strategies recommended.
High13–25Immediate management intervention required.

The bands are configurable. The tier colours are yours too, and the platform never overrides them — it only decides how strongly to tint them so a matrix reads as a heat map.

Check your scale direction

Both scales must run in the same direction for the multiplication to mean anything: level 1 the least severe and least likely, level 5 the most. If likelihood is numbered the other way round, a severe and very likely event scores lower than a severe and very unlikely one. See Troubleshooting.

Initial and residual risk

Every consequence is scored twice, and the difference between the two is the point of the whole exercise.

ScoreQuestion it answers
Initial riskHow bad is this, and how likely, with the controls you already have?
Residual riskHow bad is this, and how likely, once the mitigations in this assessment are in place?

The overview rolls this up across the fleet — how many risks were reduced, and how many high risks were eliminated. A residual score that is higher than the initial one is flagged, because it usually means a data entry error rather than a mitigation that made things worse.

The hierarchy

An assessment is a tree, and each level answers a different question.

LevelQuestion
Job stepWhat are we doing, in sequence?
HazardWhat could go wrong during this step?
ConsequenceIf it does go wrong, what actually happens?
MitigationWhat are we doing about it?

Scores attach to consequences, not to hazards — because "fire" is not a risk until you say what the fire does.