...
Measure of Impact (how damaging a risk could be to the business).
Measure of Likelihood (what is the chance this risk could happen).
Risk Score = Impact x Likelihood.
Risk heatmaps are especially valuable for executive level customers, as they can be used by decision makers to identify areas of the business where additional resources may be necessary (e.g. a software product with a high number of vulnerabilities or a business process that has unmitigated risks).
...