HAZOP Risk Matrix Configuration Guide
The HAZOP Risk Matrix Configuration process ensures hazardous scenarios are evaluated consistently across your organisation. By defining severity classifications, likelihood values and risk rankings, organisations can standardise risk assessment while supporting HAZOP studies and ongoing operational risk management.
Within the Mangan Software Solutions SLM platform, the risk matrix automatically classifies scenarios captured during HAZOP studies, helping teams visualise risk, prioritise mitigation activities and maintain consistent corporate standards across multiple facilities.
Why HAZOP Risk Matrix Configuration Matters
A well-designed HAZOP risk matrix helps organisations assess hazardous scenarios consistently across every Process Hazard Analysis (PHA). By standardising how severity and likelihood are measured, teams can compare risks objectively and prioritise mitigation activities more effectively.
Within the Mangan Software Solutions SLM platform, the configured risk matrix automatically classifies scenarios entered during HAZOP studies. This reduces manual calculations while improving reporting consistency across facilities and operating sites.
To understand how risk assessment fits into the wider study process, read the HAZOP Facilitation guide.
How to Configure a HAZOP Risk Matrix
HAZOP Risk Matrix Configuration begins within the SLM Global Module, where administrators define the framework that HAZOP teams will use to classify hazardous scenarios.
The configuration process typically includes:
- Creating severity classes
- Defining severity levels
- Adding likelihood values
- Assigning risk ranking values
- Applying risk matrix colours
- Synchronising the completed matrix across the organisation
Once configured, these values become available during HAZOP execution so facilitators and study teams can apply an agreed corporate risk methodology consistently.
Configuring Severity Classes
Severity classes represent the different categories of consequence an organisation wants to assess during a HAZOP study. These classes allow teams to evaluate more than personnel safety alone.
Common severity classes include:
- Personnel safety
- Environmental impact
- Commercial impact
- Reputational impact
- Organisation-specific consequence categories
Each class should reflect the organisation’s approved risk criteria and the types of consequences that need to be considered during HAZOP facilitation.
Administrative controls, study settings and supporting configuration activities are covered further in the HAZOP Administration guide.
Severity Classes and Severity Levels
Severity classes define what type of consequence is being assessed, while severity levels define how serious that consequence is.
For example, an organisation may create a personnel safety class with five levels ranging from minor injury to multiple fatalities. Environmental and commercial classes can use the same number of levels while applying definitions relevant to those consequence types.
For a five-by-five risk matrix, each severity class will normally require five clearly defined severity levels. Each level can include a short description, a detailed definition, a display order and the target mitigated event likelihood associated with that consequence.
Clear definitions help HAZOP teams classify scenarios consistently and reduce differences in interpretation between studies.
Configuring Likelihood Values
Likelihood values define how probable an initiating cause or hazardous event is. These values form the second dimension of the risk matrix and are selected during HAZOP scenario assessment.
Each likelihood value can include:
- A display order
- A short description
- A detailed description
- A minimum probability
- A maximum probability
- An initiating-cause likelihood value
Likelihood bands should be based on the organisation’s risk assessment standard and should be sufficiently clear for HAZOP teams to distinguish between each category.
Once saved, the configured values become selectable within HAZOP studies and are used automatically when calculating scenario risk rankings.
Defining Risk Ranking Values and Colours
Once severity and likelihood values have been configured, SLM generates the possible combinations required to build the risk matrix.
Administrators can then assign:
- A risk ranking value for each combination
- A background colour for the matrix cell
- A foreground or font colour
- The organisation’s preferred risk classification terminology
Consistent colour coding allows users to identify higher-risk scenarios quickly across studies, reports and Dynamic Risk Matrix views.
The selected ranking should reflect the organisation’s approved risk tolerance and mitigation requirements rather than being treated as a purely visual setting.
Enterprise and Site Risk Matrix Configuration
Organisations must decide whether one standard risk matrix will apply across the enterprise or whether individual facilities require their own configurations.
Where the risk methodology is standardised, administrators can create the matrix once at enterprise level and synchronise it to individual sites. This reduces duplicated configuration work and helps maintain common definitions across the organisation.
Where operating sites use different consequence criteria, regulatory thresholds or corporate standards, separate matrices can be configured at site level.
SLM therefore supports both centralised governance and site-specific risk assessment requirements without forcing every facility to use an identical model.
Using the Dynamic Risk Matrix in HAZOP Studies
As HAZOP scenarios are assessed, users select the initiating-cause likelihood and the relevant severity level for each consequence category.
SLM then automatically applies the configured matrix rules to calculate the risk ranking, target mitigated event likelihood and associated colour classification.
The Dynamic Risk Matrix allows users to:
- Visualise the distribution of HAZOP scenarios
- Identify concentrations of higher-risk scenarios
- Review scenarios within a selected matrix cell
- Navigate back to the associated HAZOP study or node
- Compare risk exposure across units or sites
The wider benefits of managing studies within a structured digital environment are explained on the MSS HAZOP Software page.
Managing Risk Reduction and HAZOP Recommendations
A risk matrix does more than classify the initial level of risk. It also helps study teams determine whether further safeguards, design changes or operational controls are required.
Where a scenario requires additional mitigation, the HAZOP team can raise recommendations and assign actions to the appropriate responsible parties.
Structured action management helps organisations:
- Record the reason for each recommendation
- Assign responsibility and due dates
- Monitor action status
- Maintain an auditable record of risk reduction decisions
- Confirm that required mitigation has been completed
For more information about managing recommendations after a study, see the HAZOP Action Tracking Software guide.
HAZOP Risk Matrix Configuration Best Practices
Effective HAZOP Risk Matrix Configuration depends on clear definitions, consistent governance and agreement between process safety stakeholders. Before beginning HAZOP Risk Matrix Configuration, organisations should confirm that the selected severity, likelihood and risk ranking criteria reflect their approved corporate risk standard.
- Confirm the corporate risk standard before beginning configuration.
- Use unambiguous descriptions for every severity and likelihood level.
- Keep probability ranges consistent and avoid overlapping definitions.
- Apply the same risk ranking colours across studies and reports.
- Decide whether the matrix should be controlled at enterprise or site level.
- Test the completed configuration before using it in a live HAZOP study.
- Review the matrix periodically as organisational risk criteria change.
For an independent industry definition of how likelihood and consequence are combined within a matrix, see the AIChE Center for Chemical Process Safety risk matrix guidance.
Regular review of HAZOP Risk Matrix Configuration helps study teams make consistent decisions, supports reliable reporting and strengthens the overall governance of HAZOP risk assessment.
Configuring a Risk Matrix
0:06
Welcome to this application explaining video, part of our global module topic range.
0:11
In this video we’ll cover the subject of configuring risk matrices within SLM.
0:17
SPHA data is captured in the SLM Hazard and LOPE modules.
0:21
Scenarios will automatically populate on the SLM dynamic risk matrix.
0:26
Within the global module, users can configure their specific organisations risk matrix to better capture PHA data.
0:35
The following information will be covered in this training.
0:37
Chapter one will be configuration of different severity classes.
0:41
Chapter 2 will be configuration of different severity values.
0:45
Chapter 3 will be configuration of different likelihood values.
0:49
Chapter 4 will be determination of risk ranking values.
0:53
Chapter 5 will be Risk matrix at different organizational levels.
0:57
Chapter 6 will be access and view of an in service risk matrix.
1:04
The SLM system allows users to configure their organisations specific risk matrix to classify risk and evaluate mitigation strategies within SLMS, HAZOP and local modules.
1:17
This matrix will be automatically populated as hazardous scenarios are captured and can even be used to connect with real operational event data to assess how well barriers are meeting the risk mitigation requirements.
1:29
The risk matrix is configured within the SNM Global module and can be configured at various levels of your organization.
1:35
Whether it’s a standard risk matrix at an enterprise level that can be propagated down to all sites or individual sites, specific risk matrices can be configured.
1:50
In chapter one we’ll be covering what types of severity classifications need to be captured for the risk matrix and also things to consider company risk matrix standards.
2:00
Is the risk matrix consistent at all company operating sites or are there variations?
2:07
Organisations can capture risk classification and mitigation requirements for different categories of the hazardous scenarios from the PHA studies.
2:15
These may include things like safety risk personnel, environmental impacts, commercial impacts, reputational impacts, or any other classifications your organization wants to capture.
2:27
For this exercise, we’ll be configuring the risk matrix at the enterprise level.
2:31
So in the SLM global module we can navigate to the enterprise level object and migrate over to the standard Risk Matrix Setup tab.
2:39
The first table available will be for populating the severity classes, so we can use the Add Class button to populate the key Class value, the long value, the short value, and the list order.
2:53
Users can remove or add as many severity classes as they like, and one note for the short value is that it’s limited to two character links.
3:01
It will be important for utilizing the severity values and classifications in the actual PHA execution studies.
3:13
In Chapter 2, we’ll be covering what levels of severity exist for the different severity classes.
3:19
How does your organization classify the risk based on the severity?
3:23
Things to consider Company Risk Matrix standards.
3:28
On the second table of the standard Risk Matrix tab, users can add a severity level.
3:34
These will represent the dimensions of the users risk matrix.
3:38
How many different severity levels are defined Using the Add Severity button?
3:43
Users will need to define which of the severity classifications.
3:46
That’s from the table above and chapter one of this video it belongs to.
3:52
What level the severity is, the order with which those are applied, a short and long description what the target mitigated event likelihood should be for that particular severity level.
4:05
Users can also classify what the colour scheme for the risk matrix will be for those different severity levels and whether or not a local will be required from the HAZOP module.
4:15
As you’re getting into scenarios that fall into these severity levels, the user will need to understand all of the different severity levels for each of the severity classes that are defined above.
4:30
So if your risk matrix is a 5 by 5, you’ll need to have 5 severity levels for the health and safety, 5 sorority levels for environmental, 5 severity levels for commercial, and have them defined here, Chapter 3 we’ll be covering How does your organization classify different likelihood values?
4:52
What is the probability threshold for the risk matrix?
4:55
Things to consider, company risk matrix standards and target mitigated probability thresholds.
5:04
The likelihood values will represent the other set of dimensions for your risk matrix classification.
5:11
Using the Add Likelihood button, users can add a likelihood value, the order in which they display, whether that may be ascending or descending, a short and long description, minimum and maximum probability for those in decimal form, and a low per initiating cause likelihood, which is typically the same as the minimum probability.
5:34
As you add these, they will automatically build the dimensions for your risk matrix and allow users to select from these inside the HAZOP and Local modules for classifying the likelihood of a scenario.
5:49
In Chapter 4 we’ll be covering how does your organization classify different risk ranking values.
5:55
What is the ranking colour for the combinations of severity and likelihood things to consider?
6:00
Company risk Matrix standards Risk ranking values represent the combination of the severity and likelihood values that were pre populated in the tables above for the different severity classes that were predefined as part of your risk matrix set up.
6:17
The user can come to the risk ranking values table and SLM will have already pre populated all of the combinations of the severity and likelihood for the different classifications that are used and defined in the tables up above.
6:30
All the user will need to do here will be to define the actual risk ranking value, the colour schemes for those how the box populates on your risk matrix.
6:40
You can utilise A slider here to gather different colour schemes and hit apply.
6:47
Once you do that, you can actually capture the hex code and use that to copy and paste into the other risk ranking values to ensure that you have similar colours across your risk matrix.
6:59
For the foreground colour or font colour you can use the hex key of 000 to render black.
7:11
In chapter 5 we’ll be covering where to create your risk matrix, how to synchronise the risk matrix set up across your enterprise and things to consider.
7:19
Is the risk matrix standardised across the organization?
7:23
In this chapter we’ll be looking at where to create the risk matrix and how to synchronise it across the organization.
7:30
The first question to ask is, is the risk matrix standard across your organization or are there different risk matrices at different facilities?
7:38
If there are different risk matrices across different facilities, then each site level object on the standard Risk Matrix set up tab, users can configure a specific risk matrix to this particular site object as shown through chapters one to four of this video.
7:54
If the risk matrix is standard across the enterprise, then users can create the risk matrix at the enterprise level as we’ve seen in chapters one to four, and then synchronize them across the different sites in the SLM object tree.
8:11
So now we’ve navigated to the Enterprise object and the Standard Risk Matrix setup tab.
8:17
We see that there’s a completed Risk matrix configured here.
8:21
And what we can do is if the matrices are standard across your organization, we can travel to a site level object and select the Standard Risk Matrix setup tab.
8:32
And we can click this Sync Risk Matrix with Enterprise Setup button.
8:36
And what it’s going to do is schedule a background task to essentially copy the Risk matrix from the Enterprise level and apply it to this site.
8:45
Again, if the sites have unique risk matrices then users can configure them individually at the site level.
8:51
But if they’re standardised across your organization, you can create it one time at the enterprise level and then go through and synchronise them at each of the individual sites.
9:04
In chapter 6 we’ll be covering the location of the in service risk matrix.
9:08
How is the Risk matrix populated And things to consider PHA execution and classification.
9:15
In this chapter, we’ll be looking at using and viewing the risk matrix as it gets populated with the HAZOP and local modules.
9:22
So for example, in the SLM HAZOP module on a specific HAZOP study in a specific node, we can see the individual scenarios that fall on this particular hazardous study.
9:34
As we scroll across, you’ll see things for the cause of that scenario in that we can select A cause likelihood that becomes a select box from the predefined values that we set up during our risk matrix configuration.
9:47
What is our cause likelihood?
9:49
Additionally, as we scroll over, we can see consequences and our hazard register table here where we can select the severity level for different severity classifications, whether it is safety, environmental, commercial, reputational, what is the severity level for those different classifications.
10:09
And once we save that SLM will automatically populate the target mitigated event likelihood that’s from your risk matrix definition and automatically populate the risk ranking of the combination of the likelihood and that severity level for those different severity classes, color coordinating them specific to your risk matrix.
10:29
Now to view this scenario on your risk matrix, you can travel to a higher level in the HAZOP or local modules, whether that be a unit object or a Site object, and we can click on the Dynamic Risk Matrix or DRM tab at these levels where you will see your organization’s risk matrix with numbers specifically placed in the scenarios in the placement of this particular matrix.
10:56
So as we click on this five, which represents A severity level of three and the likelihood value of 1, we can click on that.
11:04
It’ll open up a pop up window with all of the scenarios from the HAZOP study in that scope.
11:09
So within that unit or within that site that fall into the risk ranking value on the risk matrix so we can see more information about them.
11:18
We also have hyperlinks to go back to the study or that node ID to find out more information.
11:24
But SLM will automatically populate the scenarios on this risk matrix as you fill in the severity levels and the likelihood levels on the actual scenarios themselves.