Score each risk or vendor on two axes, usually likelihood and impact, using a consistent scale. Plot them on a grid where color moves from green for low to red for high, so the riskiest items sit in the top corner. Keep the scoring criteria documented so the map stays objective and repeatable.
