SEC Risk Assessment Example

The SEC has shared this example of a risk matrix