What is risk likelihood? Why is risk likelihood significant for risk management?
Risk management would be impossible if every identified risk were treated with equal urgency. Some risks happen every week. Others might happen once in a decade. Risk Likelihood is the tool that helps banks separate the urgent from the theoretical and focus resources where they matter most.
What is Risk Likelihood?
Risk Likelihood is a qualitative assessment of how probable it is that a specific risk will actually occur. It is usually expressed using descriptive terms — low, medium, or high — rather than exact percentages, because exact data is often unavailable.
When precise data is available, banks use Risk Probability — an exact percentage figure based on historical data and statistical modeling.
The 5-Point Likelihood Scale
- Rating 5 — Almost Certain: Will probably occur. Could happen several times per year.
- Rating 4 — Likely: High probability. Likely to arise at least once per year.
- Rating 3 — Possible: Reasonable chance it may arise over a five-year period.
- Rating 2 — Unlikely: Plausible, but could occur only over a five to ten-year period.
- Rating 1 — Rare: Very unlikely but not impossible. Unlikely within a ten-year period.
Why is Risk Likelihood significant?
Enables Prioritization: Banks cannot treat all risks equally. Likelihood helps identify which risks need immediate attention and which can be monitored at a lower intensity.
Feeds the Risk Matrix: Together with Risk Severity (impact), Likelihood creates the Risk Matrix, which visualizes overall risk exposure across the organization.
Enables Risk Magnitude Calculation: Risk Magnitude = Likelihood x Severity. A score below 5 is generally acceptable. A score of 15 or above is considered unacceptable and requires urgent action.
Prevents Over-Reaction and Under-Reaction: Underestimating likelihood leads to inadequate controls. Overestimating it wastes resources on unlikely events.
