A risk map is built by plotting the frequency of a risk on the y-axis of the chart and the severity on the x-axis. Frequency is how likely the risk is or how often you think it will occur; severity is how much of an impact it would have if it did happen. The higher a risk ranks for these qualities, the more threatening it is to your organization.

Last week we discussed the importance of risk maps and why every risk-conscious organization should begin using them (check out our post on how risk mapping allows you to gain insight, use valuable resources efficiently, and improve mitigation). Now, we’re giving you four tips on how to build the map itself.