Glossary definition

Risk Scoring

Risk Scoring is the method of assigning a quantitative or categorical rating to a vendor or finding to express its relative risk level.

TPRM & GRC

Why It Matters

In security reviews

Scores let teams prioritize attention and set consistent thresholds for approval, remediation, or escalation.

Workflow Context

Where it shows up

Applied during vendor assessment to rank and prioritize follow-up across the TPRM program.

Common Mistakes

What to avoid
  1. Treating risk scoring as a universal term with no workflow context.

    Use this as an editorial checkpoint when the term appears in a buyer review, internal workflow, or vendor evaluation.