Skip to main content

​
Overview

Risk matrices provide executive-level visibility into risk distributions across your project. TestAuto2 generates two types of risk matrix reports:
  • HAZID Risk Matrix — Shows hazard distribution across Severity × Likelihood using ISO 14971 methodology
  • HARA Risk Matrix — Shows automotive hazard distribution with ASIL classification per ISO 26262
Both reports use the nxRiskMatrix Velocity macro from the Nextedy Solutions library.

​
Generate HAZID Risk Matrix

​
Step 1: Navigate to the Report

  1. From the Home dashboard, scroll to the Reports section
  2. Click HAZID Risk Matrix Report
  3. The report page will load, showing initial and residual risk matrices

​
Step 2: Interpret the Initial Risk Matrix

The Initial Risk Matrix displays hazard counts in a 5×4 grid: 
         L1      L2      L3      L4      L5
       (Rare) (Unlikely)(Possible)(Likely)(Almost)
S4      [2]     [4]     [6]     [5]     [3]    (Catastrophic)
S3      [1]     [3]     [5]     [4]     [2]    (Critical)
S2      [0]     [2]     [4]     [3]     [1]    (Moderate)
S1      [1]     [0]     [2]     [1]     [0]    (Negligible)
Color Coding:
  • Low (Green) — Acceptable risk
  • Medium (Orange) — ALARP (As Low As Reasonably Practicable)
  • High (Red-Orange) — Requires mitigation
  • Critical (Dark Red) — Unacceptable, immediate action required

​
Step 3: Review Risk Distribution Summary Cards

Below the matrix, summary cards show:
CardMeaning
18 Critical (32%)Highest priority items requiring immediate control
12 High (21%)Significant risks needing mitigation planning
15 Medium (26%)Moderate risks for ongoing monitoring
12 Low (21%)Acceptable risks with existing controls

​
Step 4: View Residual Risk Matrix

Scroll down to see the Residual Risk Matrix showing post-mitigation distribution. Compare the two matrices to verify:
  • Critical and High risks shifted to Medium or Low categories
  • No new Critical risks introduced
  • Overall risk profile improvement
The risk level for each cell is determined by hardcoded matrix thresholds following ISO 14971 standard:
  • S1 (Negligible): L1-L4 = Low, L5 = Medium
  • S2 (Moderate): L1-L2 = Low, L3-L4 = Medium, L5 = High
  • S3 (Critical): L1 = Low, L2-L3 = Medium, L4 = High, L5 = Critical
  • S4 (Catastrophic): L1 = Medium, L2 = High, L3-L5 = Critical
These thresholds are defined in the calculateRisk() Velocity function and cannot be customized via UI.

​
Generate HARA Risk Matrix (ISO 26262)

​
Step 1: Access the HARA Report

  1. Navigate to Risks space
  2. Click ISO 26262 HARA Report in the Reports section
  3. The report includes ASIL distribution (not a traditional S×E matrix)

​
Step 2: Interpret ASIL Distribution

ISO 26262 HARA uses ASIL levels (A, B, C, D, QM) computed from S × E × C: 
ASIL Distribution (18 Total Hazards)

ASIL D: ████████ 5 hazards (28%)  — Highest safety integrity
ASIL C: ████     2 hazards (11%)
ASIL B: ██████   4 hazards (22%)
ASIL A: ███      2 hazards (11%)
QM:     █████    5 hazards (28%)  — Quality Management only
ISO 26262 does not use a traditional 2D risk matrix. Instead, ASIL is a discrete classification computed from the 3D combination of Severity (S0-S3), Exposure (E0-E4), and Controllability (C0-C3). The HARA report shows ASIL distribution as a bar chart, not a matrix.

​
Step 3: Drill Down to Individual Hazards

Click on any ASIL level bar to filter the Hazard Table below showing:
  • Hazard ID and description
  • Operational situation
  • S, E, C ratings
  • Computed ASIL
  • Linked Safety Goals

​
Customize Risk Matrix Report

​
Option 1: Adjust Cell Color Thresholds

To modify risk level colors or thresholds:
  1. Navigate to Documentation space → HAZID Risk Matrix Report
  2. Click Edit (requires project admin permissions)
  3. Locate the #set($riskResult = ...) logic in the Velocity template
  4. Modify the conditional logic mapping (Severity, Likelihood) → riskLevel
  5. Update CSS classes in <style> section for .risk-low, .risk-medium, .risk-high, .risk-critical
  6. Save and refresh the page
Only users with project-level Edit Pages permission can modify dashboard pages. Always test changes in a sandbox project first, as syntax errors will break report rendering for all users.

​
Option 2: Filter by System Element

Add a query parameter to show risks for a specific subsystem:
  1. Copy the HAZID Risk Matrix page URL
  2. Append ?systemElement=ECU Processing Subsystem (URL-encode spaces as %20)
  3. The matrix will recalculate showing only hazards linked to that system element

​
Option 3: Export to PDF

From the HAZID Risk Matrix page:
  1. Click the **** icon in the top-right toolbar
  2. Select Export to PDF
  3. Configure page settings (landscape recommended for wide matrices)
  4. Click Generate
The PDF will include both matrices, summary cards, and the color legend.
Risk matrix calculation iterates through all hazard work items twice (initial + residual). For projects with >200 hazards, consider:
  • Creating per-subsystem matrix pages with filtered queries
  • Using the nxRiskMatrix macro itemLimit parameter (max 500 items)
  • Pre-computing matrix counts in custom fields updated by workflow scripts

​
Verification

You should now see:
  1. HAZID Risk Matrix page displaying two 5×4 matrices with color-coded cells
  2. Summary cards showing count and percentage for each risk level (Low/Medium/High/Critical)
  3. Legend explaining the color-coding scheme
  4. Residual Risk Matrix demonstrating risk reduction from mitigation controls
The matrix should update automatically when:
  • New hazards are added with severity/likelihood ratings
  • Existing hazards have residual severity/likelihood values changed
  • Risk controls are linked to hazards (triggering residual assessment)

​
See Also