A practical guide to scoring workplace risks and choosing the right controls
A 5×5 risk matrix is a simple tool used to assess workplace risks by comparing two factors: likelihood and consequence. It helps teams decide which risks need urgent action and which risks can be managed through routine controls. The result is a clear and repeatable way to prioritise hazards across sites roles and tasks.
Used properly a risk matrix supports better decisions. It does not replace consultation supervision or safe work planning. It helps teams assess risk in a structured way so they can choose controls and review whether those controls are working. Safe Work Australia describes risk management as a step by step process to identify hazards assess risks control risks and review control measures.
This guide explains what a 5×5 risk matrix is how to score likelihood and consequence how to use the results in day to day operations and how INDUCT FOR WORK can help you train teams on your risk process.
Key takeaways
A 5×5 risk matrix compares likelihood and consequence in a 25 cell grid to prioritise risks.
Risk assessment helps you judge how severe a risk is and how urgently action is needed.
The matrix should be used as part of a broader process: identify hazards assess risks control risks and review controls.
The best control is to eliminate the risk. If that is not possible then minimise risk so far as is reasonably practicable using the hierarchy of controls.
Administrative controls and PPE are the least effective on their own because they rely on behaviour and supervision.
Contents
What a 5×5 risk matrix is
How likelihood and consequence are scored
How to read the risk rating and act on it
How to use a 5×5 risk matrix in your workplace
Common mistakes that make risk matrices weak
How INDUCT FOR WORK supports risk training and records
Frequently asked questions
Next step
1) What is 5x5 Risk Matrix?
A 5×5 risk matrix is a visual risk assessment tool. It uses:
5 levels of likelihood (how likely the event is)
5 levels of consequence or impact (how serious the outcome could be)
This creates a 25 cell grid where each risk can be plotted and prioritised. The current page on INDUCT FOR WORK already explains this core concept and it is a good foundation to keep.
In plain terms:
Likelihood asks: How likely is this to happen?
Consequence asks: If it happens how bad could it be?
Safe Work Australia describes risk assessment in similar terms by looking at what could happen if someone is exposed to a hazard and the likelihood of it happening.
A risk matrix is most useful when:
the task is not routine
site conditions have changed
multiple hazards interact
there is disagreement about priority
supervisors need a consistent method across teams
2) How likelihood and consequence are scored
Your business can define its own scale but the definitions must be clear and used consistently. That is where many teams go wrong.
Likelihood scale (example)
Use plain language definitions that match your operations.
Rare
May occur only in exceptional circumstancesUnlikely
Could occur at some time but not expected in normal conditionsPossible
Might occur at some time under current conditionsLikely
Will probably occur in many circumstancesAlmost certain
Expected to occur in most circumstances
Consequence scale (example)
Define consequence by realistic harm outcomes.
Insignificant
No injury or very minor impact with no disruptionMinor
First aid level injury or small operational disruptionModerate
Medical treatment injury or noticeable disruptionMajor
Serious injury major disruption or significant lossSevere / Catastrophic
Fatality life changing harm or major business impact
Your wording can vary by industry but the meaning must stay stable. If one supervisor rates “possible” differently from another then your matrix becomes unreliable.
3) How to read the risk rating and act on it
After scoring likelihood and consequence you place the risk into a matrix cell. That cell maps to a risk rating such as:
Low
Moderate
High
Extreme
The labels and colours can vary but the purpose is the same: prioritise action.
What the matrix should drive
The matrix should help you decide:
how urgent the action is
who needs to approve the work
whether work can start
what controls must be added first
when the risk must be reviewed again
Safe Work Australia notes that risk assessment can help determine how severe a risk is what action should be taken and how urgently action is needed.
Do not stop at the score
A common mistake is treating the number as the final answer. It is not. The score is the start of control planning.
Safe Work Australia is clear that you should aim to eliminate risk first and where that is not possible minimise risk using the hierarchy of control measures. It also states administrative controls and PPE are least effective because they do not control the hazard at the source.
4) How to use a 5x5 risk matrix in your workplace
Below is a simple process you can place on the page and use in training.
Step 1: Identify the hazard
Describe the hazard clearly and specifically.
Bad example: “plant risk”
Better example: “unguarded nip point on conveyor tail pulley during cleaning”
Safe Work Australia defines hazards as things and situations that could harm a person.
Step 2: Describe the event and possible harm
What could happen and to whom?
Example:
Worker reaches into area during jam clearing
Hand caught in moving parts
Serious crush injury possible
This improves consistency because teams are rating the same scenario not just the hazard name.
Step 3: Score likelihood and consequence
Use your agreed definitions and consult with workers and supervisors. Safe Work Australia states workers should be consulted at each step because they bring knowledge and experience.
Step 4: Assign an initial risk rating
Plot the risk on the matrix and record the rating (inherent risk).
Step 5: Select controls using the hierarchy
Start from stronger controls:
Eliminate
Substitute
Isolate
Engineering controls
Administrative controls
PPE
If you rely only on signage induction and PPE for a serious plant hazard your controls are likely too weak.
Step 6: Reassess residual risk
After controls are in place reassess the risk. Record the new rating and confirm whether work can proceed.
Step 7: Review during the job
Review controls if:
conditions change
equipment changes
personnel change
an incident or near miss occurs
the task takes longer than expected
Safe Work Australia includes review control measures as a core step and says controls should be reviewed to make sure they work as planned.
5) Common mistakes that make risk matrices weak
1. Vague scoring definitions
If “likely” means different things to different people your matrix will produce random results.
2. No link to controls
A matrix without control actions is only a coloured chart.
3. Using admin controls as the main fix
Training and procedures matter but on their own they are weaker controls for many hazards. Safe Work Australia states admin controls and PPE are least effective because they rely on human behaviour and supervision.
4. No review step
Risk ratings become stale when site conditions change.
5. Copy paste assessments
Generic risk matrices reduce trust and miss real site conditions.
6. No worker consultation
Supervisors and workers often know where the job actually fails under pressure. Leaving them out reduces accuracy.
7. No training on how to use the matrix
Even a good matrix fails if teams are not trained on definitions examples and approval thresholds.
6) How INDUCT FOR WORK supports risk training and records?
A 5×5 risk matrix works best when everyone scores risk the same way. INDUCT FOR WORK can help standardise that process by letting you create short role based training modules that explain:
your likelihood scale
your consequence scale
risk rating thresholds
required approvals
control hierarchy expectations
review and sign off steps
You can also add quizzes to confirm understanding and policy acknowledgements for supervisors who approve higher risk work. This improves consistency across sites and reduces the chance that each team uses a different standard.
7) Frequently asked questions
A 5×5 risk matrix is used to assess and prioritise risk by comparing likelihood and consequence in a 25 cell grid. It helps teams decide what needs urgent action first.
No. A risk matrix supports the broader risk management process. Safe Work Australia describes a full process of identifying hazards assessing risks controlling risks and reviewing controls.
A hazard is something that could cause harm. Risk is the chance of that harm happening and how serious it could be. Safe Work Australia describes hazards as things and situations that could harm a person and risk assessment as considering what could happen and the likelihood.
Not as the main control where stronger options are available. Safe Work Australia says administrative controls and PPE are the least effective because they do not control the hazard at the source and rely on behaviour and supervision.
Review when the task changes conditions change an incident or near miss occurs or when controls are not working as planned. Review is a core part of the risk management process.
8) Next step
If you want your teams to apply the 5×5 risk matrix consistently use INDUCT FOR WORK to build a short risk assessment training module with examples quizzes and acknowledgements for supervisors and workers.
That gives you a clearer process better consistency across sites and records that are easy to retrieve when clients auditors or managers ask for evidence.
