Cyber Incident Risk Matrix

// probability × impact — 2025 threat landscape
Low
Medium
High
Critical
Heat Map — hover cells to highlight
← Probability →
← Impact →
Negligible
Minor
Moderate
Major
Catastrophic
Almost Certain >80%
Medium
Spam
High
Social Engineering
Critical
Phishing
Credential Theft
BEC
Critical
Malware
Critical
—
Likely 60–80%
Low
Cryptojacking
Medium
DDoS
High
Web App Attacks
Critical
Unpatched Vuln
Cloud Misconfig
Critical
—
Possible 30–60%
Low
Medium
Accidental Exposure
Device Theft
High
MitM
High
Insider Threat
3rd Party Breach
DNS Hijacking
Critical
Ransomware
Supply Chain
Unlikely 10–30%
Low
Low
Medium
High
Zero-Day Exploit
High
Nation-State / APT
Rare <10%
Low
Low
Low
Medium
High
Full Incident Breakdown
Incident Risk Level Probability / Impact Key Reasoning
// cyber incident risk matrix — v2.1 classifications based on industry-standard risk frameworks