The matrix and the S5 override
A five-by-five likelihood by severity matrix in four bands, with catastrophic severity Critical at any likelihood and a gate and acceptor per band.
Text alternative
Likelihood: L1 Rare, L2 Unlikely, L3 Possible, L4 Likely, L5 Almost certain. Severity: S1 Negligible, S2 Minor, S3 Moderate, S4 Major, S5 Catastrophic. S5 runs on its own track: any S5 scenario is Critical whatever its likelihood. From L1 to L5, S4 is Medium, High, High, Critical, Critical; S3 is Low, Medium, High, High, Critical; S2 is Low, Low, Medium, Medium, High; S1 is Low, Low, Low, Medium, Medium. Low: a registry entry and owner, accepted by the system owner. Medium: an eval gate on the linked risk, accepted by the product owner. High: an eval gate and runtime guardrail, deploy denied without a current acceptance, accepted by the risk committee with the second line consulted. Critical: deploy denied, accepted by the governing body, or no one. The thresholds are illustrative; calibrate them to your volumes.
Download
Every file carries the attribution band "aigovernanceengineer.com · CC BY 4.0 · v0.5.0" inside the image, and the version is in the file name, so a copy always says where it came from and which edition it shows. The SVGs keep the text live: the first follows the viewer's light or dark setting, the other two fix one theme for slides and print. The PNGs are drawn with the site's own typefaces.
Reuse and credit
The figure is published under CC BY 4.0: you may copy, share and adapt it, commercially too, provided you give appropriate credit, link to the licence and say if you changed it. Keep the attribution band in the image. A credit line that covers title, author, source and licence:
“The matrix and the S5 override” by Jorge García Aibar, aigovernanceengineer.com (https://aigovernanceengineer.com/figures/risk-matrix), v0.5.0. Licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
Embed with HTML
<figure>
<img src="https://aigovernanceengineer.com/downloads/figures/risk-matrix-v0.5.0-light-1600.png" alt="A five-by-five likelihood by severity matrix in four bands, with catastrophic severity Critical at any likelihood and a gate and acceptor per band." width="800" height="1182" loading="lazy">
<figcaption>
<a href="https://aigovernanceengineer.com/figures/risk-matrix">The matrix and the S5 override</a> by Jorge García Aibar,
aigovernanceengineer.com, v0.5.0.
Licensed under <a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0</a>.
</figcaption>
</figure> Embed with Markdown

*[The matrix and the S5 override](https://aigovernanceengineer.com/figures/risk-matrix) by Jorge García Aibar, aigovernanceengineer.com, v0.5.0. Licensed under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).*