A risk matrix sorts risks on a grid by how likely they are and their possible impact. This helps in deciding which risks to focus on first.