Question 4: Using the Risk Matrix