Legal Risk Matrix

Practicing lawyers perform continuous risk assessment that maps legal exposure across two dimensions: probability of an adverse outcome and magnitude of consequences. But experienced practitioners add layers textbook risk matrices miss. They assess litigation risk (will someone actually sue?), liability risk (if sued, will we lose?), damages risk (if we lose, how much?), and reputational risk (regardless of outcome, what does the dispute do to our reputation?). Each layer requires different information and different expertise. A general counsel evaluating a product launch might conclude: 'Litigation probability is moderate (40%), liability probability if sued is low (20%), potential damages are high ($50M), but reputational risk is existential if this becomes a class action with media coverage.' The multiplication of these factors produces the expected legal cost, but the practitioner.

When to use it

When evaluating whether to proceed with a course of action that has legal or regulatory implications, comparing risks across different dimensions rather than collapsing them into a single number, assessing whether risk mitigation should target probability, severity, or both.

How it can help

This layered approach to risk assessment transfers directly to any domain where you need to evaluate multidimensional exposure. Most people assess risk on a single dimension (probability OR severity). This model teaches you to decompose risk into its component parts — each of which may have different drivers and different mitigation strategies. The distinction between expected value and distribution shape is especially valuable: it explains why organizations rationally avoid small-expected-value risks with catastrophic tails.