Risk Scoring
Risk Scoring is the method of assigning a quantitative or categorical rating to a vendor or finding to express its relative risk level.
Why it matters
Scores let teams prioritize attention and set consistent thresholds for approval, remediation, or escalation.
Where it appears in the workflow
Applied during vendor assessment to rank and prioritize follow-up across the TPRM program.
Common mistakes
- Treating risk scoring as a universal term with no workflow context.