Cyber Risk Assessment Tool

Score likelihood and impact, see the colour-coded risk, and capture mitigation intent for the scenario.

Intended audience

Security leads, risk owners, product/security partnership teams.

Use cases

Assess product or feature changes before launch.
Quantify risk for steering committees or architecture boards.
Track mitigation progress between security and delivery teams.

Usage reminder

This is an educational and planning support tool. It is not legal advice and does not replace professional security testing. Use only on systems and data you are permitted to work on.

Screen capture agreement

Only capture when permitted and avoid showing sensitive data. Keep attribution visible in captures.

How to use this template

Describe the scenario and assets at stake.
Set likelihood and impact on the sliders (1-5).
Capture threats and mitigations in the workspace.
Review the colour-coded risk and share next steps.

Replace these steps with domain-specific guidance when the template is implemented.

Exports

Choose PDF, DOCX, or CSV. A consent check will confirm intended use and attribution rules before download.

Autosaves locally. Last updated: Not saved yet

Likelihood (1-5)3

1 = rare, 5 = almost certain. Use your best estimate backed by evidence.

Impact (1-5)3

1 = negligible, 5 = catastrophic. Anchor this to business, regulatory, and customer impact.

Medium risk

9/25 score

Combine this score with control effectiveness and threat intelligence before finalising your decision. Capture mitigations below to shift likelihood or impact.

Scenario / context

What system, data, or change are you assessing?

Key assets and exposure

List the assets, data classifications, and exposure (internet/internal).

Threats and assumptions

Note the threat actors, likely techniques, and any assumptions you rely on.

Mitigations and owners

List controls, owners, and timelines that change likelihood or impact.

Risk interpretation

Risk score 9/25 (Medium). Likelihood 3/5, impact 3/5.

Medium risk: confirm compensating controls, monitor drift, and schedule a mitigation checkpoint.

Document the scenario and control owners.
Track mitigation actions with due dates.
Re-run this assessment when architecture, data sensitivity, or threat intel changes.

Preparing the page...

Cyber Risk Assessment Tool

Score likelihood and impact, see the colour-coded risk, and capture mitigation intent for the scenario.

Intended audience

Security leads, risk owners, product/security partnership teams.

Use cases

Assess product or feature changes before launch.
Quantify risk for steering committees or architecture boards.
Track mitigation progress between security and delivery teams.

Risk interpretation

Risk score 9/25 (Medium). Likelihood 3/5, impact 3/5.

Medium risk: confirm compensating controls, monitor drift, and schedule a mitigation checkpoint.

Document the scenario and control owners.

Track mitigation actions with due dates.

Re-run this assessment when architecture, data sensitivity, or threat intel changes.

Cyber Risk Assessment Tool

Intended audience

Use cases

How to use this template

Editable workspace

Risk interpretation

Licence and attribution notice

Cyber Risk Assessment Tool

Intended audience

Use cases

How to use this template

Editable workspace

Risk interpretation

Licence and attribution notice