The probability and impact matrix can be used to classify risks according to their level of impact and to prioritize them for future quantitative analyses and responses based on their rating. Typically these risk rating rules are specified by the organization in advance of the project. The matrix specifies combinations of probability and impact that lead to rating the risks as low, moderate, or high priority.