Legal Risk Score
Estimate a simple legal risk score for a situation or decision. Combine dispute likelihood, impact, documentation strength, and compliance posture into a clear index and risk band you can export and discuss.
Legal risk scoring model
The legal risk score combines three exposure factors (likelihood, impact, frequency) with three resilience factors (documentation, compliance posture, mitigation) into a 0–100 index and a qualitative risk band.
1. Exposure factors
Dispute likelihood (0–5) = L
Potential impact (0–5) = I
Exposure frequency (0–5) = F
Exposure subtotal:
E = L + I + F (range 0–15)
Higher exposure scores mean more ways for things to go wrong or hurt.
2. Resilience factors
Documentation strength (0–5) = D
Compliance posture (0–5) = C
Mitigation & controls (0–5) = M
Resilience subtotal:
R = D + C + M (range 0–15)
Higher resilience scores mean you are better prepared to prevent or handle issues.
3. Raw risk index
Max subtotal = 15
Normalized exposure:
E_norm = E ÷ 15
Normalized resilience:
R_norm = R ÷ 15
Raw risk index (0–1):
Risk_raw = E_norm × (1 − R_norm)
Strong resilience reduces the effective risk of a given exposure.
4. Legal risk score and bands
Legal risk score (0–100):
Score = round(Risk_raw × 100)
Risk bands:
If Score ≤ 20: "Low"
If 21–40: "Moderate"
If 41–70: "High"
If > 70: "Critical"
Use bands to prioritize which situations deserve deeper analysis or mitigation work.
Using legal risk scores in practice
Legal risk scores are not crystal balls—they’re conversation starters. The goal is to make your assumptions explicit so you can challenge them with advisors and stakeholders.
Worked example
Imagine a new consumer contract rollout:
- Likelihood: 3 (likely some disputes)
- Impact: 3 (high if disputes escalate)
- Frequency: 4 (very frequent use)
- Documentation: 4 (strong contract and records)
- Compliance posture: 3 (generally compliant)
- Mitigation: 3 (reasonable controls and support)
Exposure subtotal E = 3+3+4 = 10 → E_norm ≈ 0.67. Resilience subtotal R = 4+3+3 = 10 → R_norm ≈ 0.67. Raw risk index Risk_raw ≈ 0.67 × (1 − 0.67) ≈ 0.22. Score ≈ 22, which falls into the “Moderate” band—enough to warrant attention, but not an emergency.
Practical tips
- Use the notes field to capture assumptions behind each score.
- Re‑score situations after you change controls, documentation, or policies.
- Escalate high or critical scores to qualified legal professionals.
- Compare scenarios (e.g., different contract terms) by adjusting inputs.
Frequently Asked Questions
Does this tool know which laws apply?
No. You must work with qualified professionals to understand your legal obligations. This tool only structures your own risk assessment.
Is the score objective?
No. It is based entirely on your inputs and assumptions. Treat it as a starting point for discussion, not a definitive measure.
Can I use this in board reports?
You can use it as an internal planning metric, but it should not replace formal risk assessments or legal opinions.
How often should I re‑score?
Re‑score when material facts change—new regulations, contract revisions, control changes, or emerging patterns of disputes.
Related tools
Information on this site is for educational purposes only and is not financial, tax, or legal advice. Calculations are estimates and may not reflect actual results. See our Privacy Policy and Disclaimer.