Risk Calculator

About the Risk Calculator

The Risk Calculator computes expected loss, mitigation return on investment, risk scores, and sensitivity analysis for any risk scenario. Enter the probability of occurrence, potential impact, and mitigation details to get a complete risk assessment with visual aids.

Risk management requires quantifying uncertainty. The expected loss (probability × impact) gives the weighted average outcome, while the risk score helps categorize threats as low, medium, high, or critical. By comparing expected loss with and without mitigation, you can make data-driven decisions about where to invest in risk reduction.

This calculator includes a sensitivity table showing how expected loss moves as probability changes, a risk matrix for quick prioritization, and a gauge that summarizes the current rating. That combination is useful when you need both a numeric estimate and a simple way to compare one risk against another.

When This Page Helps

Use this calculator when you need a quick expected-loss estimate and a disciplined way to judge whether mitigation is worth paying for. It is practical for project planning, procurement, insurance-style comparisons, and any review where probability estimates are rough but decisions still need a consistent framework.

How to Use the Inputs

1. Enter the probability (%) that the risk event occurs.
2. Enter the financial impact (cost) if the risk materializes.
3. Enter the cost of mitigation measures.
4. Enter the reduced probability (%) after mitigation.
5. Use presets for common scenarios like project risk or insurance.
6. Review expected loss, mitigation benefit, and ROI in the output cards.
7. Check the sensitivity table to see how results change with probability.
8. View the risk gauge for a visual risk level assessment.

Example Calculation

Tips & Best Practices

• Expected loss is the minimum you should budget for risk reserves.
• If ROI is negative, consider accepting the risk rather than mitigating.
• Use the sensitivity table when you're unsure about the exact probability.
• Document your probability estimates — even rough estimates beat ignoring risks.
• High-impact, low-probability events may need mitigation despite negative ROI (catastrophic risk).
• Review and update risk assessments quarterly as conditions change.

Expected Value in Risk Management

Expected value is the cornerstone of quantitative risk analysis. By multiplying probability by impact, we convert uncertain future events into comparable dollar amounts. A 5% chance of a $1M loss ($50K expected) can be directly compared to a 50% chance of a $120K loss ($60K expected), enabling rational prioritization.

Mitigation Decision Framework

The decision to mitigate follows simple economics: mitigate when the benefit exceeds the cost (ROI > 0). However, real decisions also consider risk appetite, regulatory requirements, and cascading effects. A startup might accept risks that a Fortune 500 company would mitigate due to different risk capacities.

Risk Registers and Portfolios

In practice, organizations maintain risk registers listing dozens or hundreds of identified risks. Each is scored using probability × impact, then plotted on a risk matrix. This calculator models the assessment for individual entries. The total portfolio expected loss is the sum of all individual expected losses, assuming independence.

Frequently Asked Questions

• What is expected loss?

  Expected loss is the probability-weighted average cost of a risk: Probability × Impact. A 30% chance of losing $50,000 has an expected loss of $15,000. It represents the long-run average cost if you face this risk repeatedly.

• How do I interpret mitigation ROI?

  ROI > 0% means the mitigation saves more than it costs (worthwhile). ROI = 100% means you save double your investment. ROI < 0% means mitigation is more expensive than the expected benefit — consider accepting the risk instead.

• What is a risk matrix?

  A risk matrix categorizes risks by probability and impact into levels (Low, Medium, High, Critical). It provides a quick visual assessment. The scenarios table shows five pre-defined levels from Very Low to Very High risk.

• Should I always mitigate risks?

  Not always. If mitigation costs exceed the expected benefit, it's economically rational to accept the risk. The ROI calculation helps make this decision. Also consider non-financial factors: reputation damage, safety, and regulatory requirements.

• What is sensitivity analysis?

  Sensitivity analysis shows how results change when you vary one input. The table varies probability from 10% to 90%, showing expected loss and mitigation benefit at each level. This reveals the breakeven point where mitigation becomes worthwhile.

• How do I handle multiple risks?

  Calculate expected loss for each risk independently, then sum them for the total risk portfolio expected loss. Prioritize mitigation for risks with the highest expected loss or highest ROI.