Setting up the Project Risk Score Matrix The scoring can be based on multiple levels and doesn’t have to be measured to 5 levels – 3 may suffice for most organizations.