Free HSE tool · Risk Assessments
Risk Matrix Calculator
The risk matrix is the simplest instrument in HSE and the one everyone claims to know — until the auditor asks why the same hazard scored 4 in one document and 12 in another. The difference is almost always the scoring rules: what a 3 means, and what you do once you have the number.

Free 5×5 HSE Risk Matrix Calculator
Set the likelihood and the consequence — the grid lights the cell, scores it, and tells you the action the band requires.
This calculator uses the standard 5×5 grid with explicit bands — 1–4 low, 5–9 medium, 10–15 high, 16–25 very high — and it tells you the action each band requires, not just the colour. Move the two selects, watch the grid light up, and use the anchor guide below to keep every document on the site scoring the same way.
How to use the tool
- Select the likelihood — 1 (rare) to 5 (almost certain) — using the anchors: the definition, not the feeling
- Select the consequence — 1 (negligible) to 5 (catastrophic) — on the same anchored scale
- Read the score and the band; the tool highlights the cell and writes the action the band requires
- If the band is high or very high, add a control and re-score to see the drop — that drop is your justification for the control
- Copy the anchor definitions into your site method statement, so every assessor on the site scores the same hazard the same way
Worked example
A forklift working a pedestrian corridor: likelihood 4 (it happens every shift — almost certain), consequence 4 (serious injury). Score 16: very high. Add segregation — a physical barrier, a one-way route, a pedestrian gate. Re-score: likelihood 2, consequence 4 — score 8, medium. The assessment now reads: risk reduced from 16 to 8 by barrier and route segregation; the residual 8 is managed by speed control and the daily inspection. That is a risk assessment an auditor can follow, and an investigator will thank you for after the event.
Standard & legal context
The 5×5 matrix appears in the HSE (UK) ACoP L80 on managing health and safety, in the ISO 31000 risk management guidance, and in most national frameworks. The grid itself is a convention, but the bands and the required actions are not optional — a matrix without consequences is a decoration. OSHA does not mandate a specific grid, but its enforcement practice expects a documented risk evaluation with the same logic. Whatever framework you follow, write the anchors down: 4 = serious injury, medical admission is a rule; 4 = bad is not.
Common mistakes
- Scoring after the controls and calling it pre-control — pre-control score first, controls second, residual last, in that order
- Treating a 9 and a 10 as the same medium — the band boundary is the decision point, and 10 means a date and an owner
- Letting different assessors use different anchors — two people, two matrices, zero comparability
- Re-scoring optimistically without adding a control — the residual must be earned by something physical, procedural or trained
Need the sign-off, not just the tool?
The tool is the preparation; the sign-off is the professional. For the statutory assessments, the audits, the ISO 45001 implementation and the training that comes with them, ask Muhammad Umer — 8+ years across Iraq, KSA and Pakistan, and the programme runs through umer-hse.pro. One message gets the written scope.
Common questions
Risk Matrix Calculator — answered
What is an HSE risk matrix?
A risk matrix is a grid that multiplies the likelihood of a hazard occurring by the consequence if it does, giving a score that sits in a band — low, medium, high, very high — where each band carries a required action.
What are the five levels of the risk matrix?
Likelihood 1–5 (rare to almost certain) and consequence 1–5 (negligible to catastrophic). The product gives a score from 1 to 25, banded as 1–4 low, 5–9 medium, 10–15 high, 16–25 very high on the standard grid.
What score is considered high risk?
10–15 is high (priority action, defined deadline, owner named) and 16–25 is very high (stop or restrict the activity until controls are in place). Your organisation can tighten the bands, but it must state them.
Is the risk matrix a legal requirement?
The law requires risk evaluation — the UK MHSWR, ISO 45001 clause 6.1, and OSHA hazard identification all require it — but it does not mandate one specific grid. The matrix is the tool; the duty is to evaluate and document.
Why 5×5 instead of 3×3 or 10×10?
Five by five is the resolution where two independent judgements stay defensible: finer grids pretend to a precision they do not have, and coarser grids cannot separate the decisions that matter. It is the industry default for a reason.
How do I record the matrix on a risk assessment?
State the grid and the anchors once in the method statement, then on each assessment record the pre-control L and C, the score, the controls, the residual L, C and score, the owner and the date. The worked example on this page shows exactly that.
Keep building
Related tools
General Risk Assessment
Free 5-step general risk assessment tool: identify hazards, who is harmed, score the risk, select controls and
Risk AssessmentsRisk Register
Free HSE risk register tool: log risks with likelihood and consequence, auto-scored 5×5, owner and due date pe
Risk AssessmentsFive-Step Risk Assessment
The HSE five steps to risk assessment, explained step by step with a worked example: identify hazards, who is
THE HEALTH AND SAFETY is an education and knowledge network. The tools are free and open; the professional assessments and audits run through umer-hse.pro.
Safety disclaimer
These tools are practical guidance, built to the UK baseline with the US equivalents named on each page. They do not replace a competent person assessment for high-risk work, a statutory assessment, or the advice of your insurer. Where a document has legal force — the fire risk assessment, the COSHH register, the permit to work — the responsible person owns it. Use the tool as the preparation, and the competent person as the sign-off.
