Risk evaluation using risk matrix. Risk matrix covers four types of risk: to people (P), the environment (E), assets (A) and reputation (R).