The Probability and consequence matrix is a tool that allows you to determine the risk rank separately for each goal, for example, for cost, time, or content. The risk rank helps to manage risk response. For example, for risks located in the high-risk zone (red area) of the matrix, preventive operations and an aggressive response strategy are necessary (Fig. 9.1). For threats located in a low-risk area (green), preventive operations may not be required.