SMS risk matrix