Help centre / Risks, policies & compliance / How risk scores are worked out
How risk scores are worked out
A risk's score is likelihood multiplied by impact, each rated 1 to 5, so scores run from 1 to 25. Scores of 15 or more show red, 8 to 14 amber, and lower scores calmer colours. Every change is saved, so you can see the trend over time.
There's no hidden formula. You can check every score yourself with simple times tables.
How is the score worked out?
Each risk has two ratings, set by you:
- Likelihood: how likely it is to happen, from 1 (very unlikely) to 5 (almost certain).
- Impact: how serious it would be, from 1 (minor) to 5 (severe).
The score is one multiplied by the other. If Meadowbank Community Trust rates "Loss of our main grant funder" as likelihood 3 and impact 4, the score is 12. The highest possible score is 25.
What do the colours mean?
- Red (critical): score 15 or more. These need the board's attention.
- Amber (high): score 8 to 14. Keep watching these.
- Moderate and low: score under 8, shown in calmer colours. Lower concern, still worth a review date.
The register sorts by score, highest first, so red risks always sit at the top.
Where do controls and mitigation fit in?
Each risk records the Existing controls you already have and the Mitigation you plan. When those start working, re-score the risk. Lowering the likelihood or impact lowers the score, and the change is recorded, so the register shows your mitigation is real rather than hoped for.
How does the history work?
Every time a risk's likelihood, impact or status changes, a snapshot is saved automatically: the new score, who made the change and when, with a note such as "Rating reduced (was 4×4=16)". The risk's page shows this as a trend chart, so at a glance you can see whether a risk is easing or growing.
Can I trust the numbers?
Yes, because they're your numbers. The platform only does the multiplication. The judgement about likelihood and impact stays with you and your board, which is exactly where the Charity Commission expects it to be. And nothing changes just because you looked: scores only move when someone edits them, and every edit is on the record.
The governance behind this: our free guide on charitycontrol.org explains the why in plain English.