Describe probability and impact matrix (the nature and how you can use it in the risk management process)