Source: https://www.mitrecaasd.org/SMS/doc/Sample_Risk_Matrix.pdf