Using a 5×5 Risk Heat Map Without Losing Professional Judgement

The colour is not the decision

Risk heat maps are widely used because they translate likelihood and severity into a form that people can compare quickly. They can help teams prioritise action and help managers see where exposure may be concentrated.

The weakness begins when a selected cell is accepted without understanding the judgement behind it. A score can look precise even when the description of the hazard, exposure or consequence is unclear. Different assessors can also interpret labels such as “possible” and “major” differently unless the organisation applies common guidance.

Likelihood needs operational evidence

Likelihood should consider how often and for how long exposure occurs, how many people may be exposed, previous events, foreseeable error, abnormal conditions and the reliability of current controls. The absence of a recent incident does not prove that harm is unlikely.

A useful scale is understood consistently by the people using it:

Severity should use the credible outcome

Severity should represent the worst credible consequence arising from the exposure being assessed. An impossible worst case can inflate every score, while a vague term such as “injury” can hide the real significance of the hazard. The assessor should describe the harm first and then select the corresponding level.

Every band needs a defined response

The matrix adds management value when a score triggers a known response. RPG Excellence uses four action bands:

Do not score future controls as if they already exist

Initial risk describes the position with the controls currently implemented. Residual risk should describe the position after further controls have actually been completed and verified. Lowering the score while an action is still open creates assurance that has not yet been earned.

The record should keep the assessment, action owner, target date, evidence and verification together. This allows management to distinguish controlled risk from intended improvement.

Use the map to ask better questions

A heat map should support challenge: Why is this exposure considered unlikely? What makes the stated harm credible? Which controls are safety-critical? What evidence shows they are reliable? What must change before the risk can move to a lower band?

Used this way, the matrix becomes more than a graphic. It becomes a common language for risk, action and management attention.

Reference: UK Health and Safety Executive, Managing risks and risk assessment at work. A matrix supports assessment but does not replace competent professional judgement.