Working with clients I find the matrix useful and find thing that is would be a good idea to standardize the risk matrix as I also take the approach to initial and residual risk rating. It is easier using pre-populated templates to start off with and then after the training give the client the template to work with it some more to it ensure it is fit for purpose. Keeping it simple usually works the charm