This paper proposes ways to enhance “repeatability” and “defendability” by providing categories for each level of the probability and consequence axes. This takes advantage of the fact that some information is known and other information is not known. Making several smaller estimates (some with known information) allows a better total estimate to be made. To demonstrate the concept, a 5 X 5 matrix example is used that categorizes each consequence level into four distinct types of consequences and provides three potential approaches for estimating probability, depending on the information available. Criteria for each category are also shown, for illustrative purposes only.
As a look toward future developments, the potential advantages of a three dimensional risk ranking tool are also discussed, with potential axes suggested.