Organisational behaviour
Risk management
Risks are an ubiquitous and characteristic side-effect of taking action by organisations (see also Risk–reward analysis).
Read article
keymodelsAll comparisons
Compare
Risk management vs The risk management matrix
These models cover closely related ground. Compare their purpose, scope, practical guidance, and supporting resources to choose the better fit.
Related modelsFinanceFinanceOperations
Strategy
The risk management matrix
The risk management matrix is another alternative to the Suns & Clouds, though, as with the composite risk index of [The composite risk index and the 5×5 risk matrix](../the-composite-risk-index-and-the-55-risk-matrix--97a9bc04/index.md), it looks only at risk, not.
Read articleChoice logic
Use this when.
Use risk management whenever uncertain events or conditions could materially affect objectives. The depth should match the stakes, reversibility and velocity of the decision.
Use the matrix as a call to action: identify how transfer, mitigation or redesign could make a strategy more robust.
Extracted signals
Strengths, limits, and pitfalls.
Risk management
- Write each material risk as cause, uncertain event and consequence, then assign an owner, response, trigger and residual exposure. This makes the register actionable and reveals when several risks depend on the same fragile control.
- Start with objectives, stakeholders, obligations, risk appetite and decision horizon. Define a shared taxonomy without allowing it to constrain discovery.
- Identify threats and opportunities through multiple perspectives: operational, financial, market, strategic, technological, environmental, safety, people, legal, geopolitical and reputational. Include dependencies, concentration, emerging risk and scenarios in which several events occur together.
Watch for
- Do not confuse a completed register with managed risk. Static scores, hidden assumptions and untested controls create false reassurance; monitor the environment and exercise the response before it is needed.
The risk management matrix
- For every severe exposure, separate what can change the event from what can reduce its consequence, then design the response accordingly.
- Assemble the material risks from strategy development. Define scales and evidence, then rate likelihood and value impact consistently. Add a manageability assessment that distinguishes prevention from consequence reduction.
- Plot manageability against impact and size each circle by likelihood.
Watch for
- Like the composite risk index and 5×5 risk matrix, this tool can produce a threat only conversation. Review opportunity and upside separately.
Read next
Open the full model articles.
Each comparison links back to the full articles so you can inspect examples, steps, caveats, and related templates before choosing.
Application bridge