Neither. Try the attached.
I've played around with the risk matrix a bit, just for demo purposes, but that's of no consequence for the macro's execution or the document's functioning. What does matter is that I've applied a bookmark named 'RiskMatrix' to the first table and I've titled the 'Likelihood' and 'Impact' content controls in the second table appropriately.