Source: https://rdept.cgaux.org/documents/RiskManagement/Risk Assessment Matrix.pdf