Risk Impact Assessment Calculator
Quantifies the net financial exposure of a project risk after mitigation, scaled over your planning horizon. Use it when deciding whether a risk response plan is worth its cost.
Last updated: September 2026
Formula below · 1 source (Wikipedia) · Updated Sep 2026
Compare with similar
About this calculator
This calculator computes a risk-adjusted expected monetary value (EMV) that accounts for mitigation effort and time. The core formula is: EMV = [(impactCost × (probability / 100) × (1 − mitigationEffectiveness)) + mitigationCost] × (timeHorizon / 12). First, the raw expected loss (impact × probability) is reduced by how effective your mitigation strategy is — a 60% effective plan removes 60% of the expected loss and leaves 40%. The mitigation cost is then added back because you pay it regardless of outcome. Probability and mitigation cost are treated as 12-month figures, so multiplying by timeHorizon / 12 prorates the exposure to your project horizon (a 6-month horizon halves it, an 18-month horizon multiplies it by 1.5). Compare the result with the unmitigated expected loss (impact × probability × horizon/12) to see whether the mitigation pays for itself.
How to use
Suppose a server outage risk has an impact cost of $50,000, a 20% probability, a mitigation cost (e.g., redundancy setup) of $3,000, mitigation effectiveness of 60%, and the project runs 6 months. Plug in: EMV = [(50,000 × 0.20 × (1 − 0.60)) + 3,000] × (6 / 12) = [(50,000 × 0.20 × 0.40) + 3,000] × 0.5 = [4,000 + 3,000] × 0.5 = $3,500. Your net risk exposure for the 6-month horizon is $3,500, meaning the $3,000 mitigation spend is justified.
Frequently asked questions
What is expected monetary value and how is it used in risk management?
Expected monetary value (EMV) is the probability-weighted average outcome of a risk event, expressed in dollars. In risk management it helps compare risks of different likelihoods and severities on a single scale. A risk with a 5% chance of a $100,000 loss has an EMV of $5,000, making it directly comparable to a 50% chance of a $10,000 loss. Project teams use EMV to prioritize which risks deserve mitigation budgets and which can be accepted or transferred.
How does mitigation effectiveness change the risk exposure calculation?
Mitigation effectiveness represents the percentage by which a control reduces the likelihood or impact of a risk. A 60% effective control means only 40% of the residual risk remains, so the formula multiplies the raw expected loss by (1 − 0.60) = 0.40. This directly lowers the EMV, making expensive mitigation worthwhile only when its effectiveness is high enough to offset its own cost. If mitigation effectiveness is low, the added cost may actually increase your total exposure.
Why does the time horizon affect the risk exposure calculation?
Risks accumulate over time: a risk with a 25% chance of occurring in any 12-month period is more likely to strike during an 18-month project than a 6-month one. This calculator treats the probability and the mitigation cost as 12-month figures and multiplies the exposure by timeHorizon / 12, so a 6-month project carries half the annual exposure and an 18-month project 1.5 times it. That is a simple proration that is accurate when the probability is small; for high probabilities over long horizons, the true chance of at least one occurrence is 1 − (1 − p)^(years). Including the time horizon prevents managers from under-budgeting contingency reserves on long projects.