IOSH 5x5 Risk Matrix: The Complete Guide

Overview

1. A 5x5 risk matrix helps assess risks using likelihood and severity.

2. Likelihood and severity are each rated across five defined levels.

3. Risk scores help prioritise hazards and guide control measures.

4. Clear scoring criteria improve consistency across risk assessments.

5. Regular reviews keep risk ratings relevant as conditions change.

In today's fast-paced and complex work environments, identifying and managing risks is crucial to ensure the well-being of employees and the success of businesses. The IOSH 5x5 risk matrix is a risk assessment tool designed to aid organisations in evaluating and mitigating potential hazards effectively.  

In this blog, we will explore the concept of the IOSH 5x5 risk matrix, its benefits, and how to structure it within your safety management system effectively.

What is the IOSH 5x5 Matrix?   

The IOSH 5x5 risk matrix is a graphical tool that combines the likelihood of harm with the severity or consequence of that harm to help prioritise risks. It divides risks into five categories based on likelihood and five categories based on severity. This type of matrix can help organisations to prioritise their actions and resources based on the level of risk posed by specific hazards.

Understanding the Matrix   

The 5x5 risk matrix consists of two main dimensions: likelihood and severity. Likelihood refers to the probability or chance of a hazard occurring, while severity relates to the potential impact or consequences of that hazard. Each dimension is divided into five levels, creating a matrix with 25 cells.

Note: Risk-rating labels, score ranges, and action thresholds can vary between organisations. The matrix should be adapted to the organisation’s risk assessment system.

Likelihood 

Let's explore the five levels of likelihood within the 5x5 risk matrix: 

a) Rare: This level indicates that the occurrence of a hazard is highly unlikely, with a minimal chance of it happening.

b) Unlikely: Here, the probability of a hazard occurring is low but not negligible. It may happen sporadically or under specific circumstances. 

c) Possible: This level suggests a moderate chance of a hazard occurring. It is neither uncommon nor frequent but falls somewhere in between. 

d) Likely: Likelihood is higher at this level, indicating a significant probability of a hazard occurring. It is expected to happen occasionally or repeatedly. 

e) Almost Certain: The highest level of likelihood signifies that a hazard is very likely to occur. It is anticipated to happen frequently or consistently.

Severity 

Now, let's delve into the five levels of severity within the 5x5 risk matrix:

a) Negligible: Hazards classified under this level pose minimal or insignificant consequences. They may result in minor injuries or negligible damage. 

b) Minor: This level denotes hazards that can cause minor injuries, illnesses, or damage. The impact is relatively limited and easily manageable. 

c) Moderate: Hazards at this level have the potential to cause noticeable injuries, illnesses, or damage. They require attention and appropriate control measures. 

d) Major: This level represents hazards that can cause significant injuries, illnesses, or damage. They have a notable impact and necessitate immediate action. 

e) Catastrophic: The highest level of severity indicates hazards that can cause severe or life-threatening injuries, illnesses, or extensive damage. They require immediate and comprehensive control measures to prevent catastrophic consequences. 

To effectively utilise the 5x5 risk matrix, you plot the likelihood and severity ratings of each identified hazard onto the matrix. By intersecting with the corresponding levels, you can determine the overall risk level associated with a particular hazard. This helps prioritise risks, allocate resources, and develop appropriate control measures based on the identified risk level.

Pro Tip

Add a short note explaining why each score was chosen so future assessors can understand the judgement.

Support healthier workplaces with the IOSH Managing Occupational Health and Wellbeing Training - Register now!

How to Structure the IOSH 5x5 Risk Matrix   

To structure the IOSH 5x5 risk matrix effectively within your organisation, you need to follow a systematic approach. This ensures consistency, clarity, and ease of use when assessing and managing risks. Here are the key steps to structure the 5x5 risk matrix: 

a) Identify Potential Hazards: Begin by identifying the potential risks relevant to your industry or workplace. Consider factors such as machinery, processes, substances, and environmental conditions that may harm employees' health and safety. 

b) Assess Likelihood and Severity: Once you have identified the hazards, assess their likelihood and severity. Draw on historical data, expert knowledge, industry standards, and any available risk assessment information. Determine the likelihood and severity ratings for each hazard, keeping in mind your organisation's specific context. 

c) Define Likelihood and Severity Levels: Next, establish clear definitions and criteria for each level of likelihood and severity. This ensures consistency in rating hazards across the organisation. Develop concise descriptions for each class, making it easier for assessors to assign ratings accurately. 

d) Plot Likelihood and Severity on the Matrix: Plot the likelihood and severity ratings on the 5x5 risk matrix using the established levels. Assign each hazard to the appropriate cell based on its corresponding ratings. This visual representation allows for a quick assessment of the overall risk level associated with each hazard. 

e) Determine Risk Levels: By combining the likelihood and severity ratings, you can determine the overall risk level for each hazard. Assessors can refer to the matrix to identify whether a hazard falls into low, medium, high, or extreme risk categories. This classification guides the prioritisation of control measures and resource allocation. 

f) Define Risk Control Measures: Based on the identified risk levels, develop appropriate control measures for each hazard. Consider feasible measures to reduce or eliminate the risks associated with each hazard. This may include elimination, substitution, engineering controls, administrative controls, and PPE, following the hierarchy of controls where appropriate. 

g) Communicate and Train: Ensure that the structured 5x5 risk matrix and associated control measures are effectively communicated to relevant stakeholders within the organisation. Provide training and guidance on using the matrix, interpreting the risk levels, and implementing the appropriate control measures. 

h) Regularly Review and Update: Risk assessments should be an ongoing process. Periodically review the risk assessment when hazards, processes, controls, or workplace circumstances change, and update the matrix criteria if the organisation’s scoring system requires revision.

Strengthen your workplace safety knowledge and manage risks with confidence with the IOSH Managing Safely Course – Sign up today!

Benefits and Limitations of Implementing the IOSH 5x5 Risk Matrix   

Implementing the 5x5 risk matrix offers several benefits and limitations to organisations. Listed below are four benefits and limitations each of implementing the matrix: 

Benefits of IOSH 5x5 Risk Matrix   

Some benefits of IOSH 5x5 risk matrix are given below.

a) Standardised Approach: A consistently defined 5x5 risk matrix can provide a standardised approach to risk rating within an organisation. It establishes a common framework and language for evaluating and categorising risks based on their likelihood and severity. This consistency enables better and effective communication, comparability of risks across different departments and projects, and a unified understanding of risk levels throughout the organisation. 

b) Effective Resource Allocation: One of the significant benefits of the 5x5 risk matrix is its ability to prioritise risks and allocate resources effectively. Organisations can identify high-priority risks that require immediate attention by assigning risk levels to each hazard and allocating resources accordingly. This ensures that resources, such as time, budget, and personnel, are focused on areas with the highest potential impact, enhancing the efficiency and effectiveness of risk management efforts. 

c) Improved Decision-making: The visual representation of risks provided by the 5x5 risk matrix facilitates better decision-making. It lets stakeholders quickly grasp the overall risk profile and understand the potential consequences of different hazards. This understanding empowers decision-makers to make informed choices about risk mitigation strategies, control measures, and resource allocation, supporting more informed risk-management decisions. 

d) Enhanced Communication and Collaboration: The 5x5 risk matrix aids in communicating complex risk information to stakeholders. Its visual nature simplifies the presentation of risks, making it easier for individuals at all levels of the organisation to comprehend and engage with the information. This promotes better communication, collaboration, and involvement of employees in the risk assessment and mitigation process. It can support a more proactive safety culture, encourage employee engagement, and ensure everyone understands risk management's importance. 

Limitations of IOSH 5x5 Risk Matrix   

Below are some limitations of IOSH 5x5 risk matrix:

a) Oversimplification of Risks: The 5x5 risk matrix simplifies risks into discrete levels of likelihood and severity. This simplicity may oversimplify complex risks or fail to capture all relevant factors. Some risks may be multidimensional and require a more comprehensive assessment to understand their nature and potential consequences adequately. 

b) Subjectivity in Ratings: The likelihood and severity ratings in the 5x5 risk matrix involve a certain degree of subjectivity. Assessors may interpret and assign ratings differently based on their perspectives and experiences. This subjectivity can introduce inconsistencies in risk assessments between assessors and even within the same organisation, impacting the reliability and accuracy of the matrix results. 

c) Limited Consideration of Exposure: The 5x5 risk matrix primarily focuses on the likelihood and severity of hazards without considering the frequency and duration of exposure. Risks that occur frequently or have prolonged exposure may pose a higher level of risk, but this aspect is not explicitly accounted for in the matrix. It is essential to supplement the matrix with additional methods to address risks that involve frequent or prolonged exposures. 

d) Limited Contextual Factors: A basic 5x5 risk matrix may not explicitly capture exposure frequency or duration unless these factors are built into the likelihood criteria. Factors such as organisational culture, regulatory requirements, technological advancements, and industry-specific considerations are not explicitly incorporated into the matrix. Businesses should consider these factors alongside the matrix to ensure a comprehensive and accurate assessment of risks.

Spot the Missing Information

Review this incomplete risk assessment and identify what information is missing.

Hazard: Chemical spill

Likelihood: 3

Severity: 4

Risk Score: 12

Control: Wear PPE

Answer: The assessment is incomplete because it does not explain:

1. Who may be harmed: Employees, contractors, visitors, or others who could be exposed. 

2. Nature of the chemical: The substance involved and the type of harm it may cause. 

3. Exposure details: How often exposure could occur and how long people may be exposed. 

4. Existing controls: Measures already in place before additional actions are introduced.

5. Rating justification: Why was likelihood rated 3 and severity was rated 4. 

6. Suitable control measures: PPE alone may not be enough. Elimination, substitution, engineering controls, and administrative controls should also be considered. 

7. Residual risk: The likelihood, severity, and risk score should be reassessed after controls are applied.