Risk probability and impact matrix