There are some divergent opinions about the origins of the use of the risk matrix, but the most consensual is that it was first proposed in the US Air Force.