UofLHealth in Louisville, Kentucky, developed this risk matrix for ranking risks according to impact, vulnerability and control criteria, said Shelly Denham, senior vice president of compliance, risk and audit services.  Impact criteria describes how likely the risk or incident will happen at your organization, while vulnerability and control criteria refer to “our ability to mitigate them,” she said. “As we are developing our risk assessment, the matrix helps identify our low, medium and high risks.” Contact Denham at shelly.denham@uoflhealth.org.