Category: Risk management frameworks · Reviewed by Matt Bartlett, Director · Founder · Last reviewed
Risk heat map
A risk heat map is a graphical representation of a risk register, plotting risks on a grid of likelihood (x-axis) against impact (y-axis) with colour-coding (typically green / amber / red) to indicate severity. It is the most common board-level reporting tool for risk.
Strengths
Rapidly communicates the relative severity of many risks.
Surfaces concentrations (multiple risks in the red zone).
Supports tracking inherent vs residual positions through arrows.
Limitations
Heat maps are a useful summary but a poor analytical tool:
They compress probability distributions to a single point.
They invite arithmetic comparison of risks measured on different units.
They obscure correlation between risks.
Researchers (notably Tony Cox, 2008) have shown that ordinal heat maps can produce decisions inconsistent with expected loss.
For analytical work, supplement heat maps with Monte Carlo simulation, bowtie analysis or value-at-risk measures.
Design tips
Use logarithmic impact scales (£10k, £100k, £1m, £10m, £100m+) rather than linear ones.
Specify likelihood bands as time-bounded probabilities (“once every 25 years” / “10% in any year”), not vague labels (“possible”).
Show arrows from inherent to residual positions so the value of controls is visible.
Always pair the map with the underlying register entries.
Our service promise. We acknowledge every quote request the same working day. For straightforward risks, indicative terms typically follow within five working days. Complex risks — higher-risk buildings, cladding, mid-term proposals requiring fresh underwriting — may take longer; we’ll send you a progress note by the end of the fifth working day in those cases.