Source: http://rdept.cgaux.org/documents/RiskManagement/Risk Assessment Matrix.pdf