Caleb is completing a risk assessment on his supply chain using a matrix categorising risks...

Risk assessments in procurement often use a likelihood × severity matrix. Risks are scored on scales from 1–5, and the scores are multiplied. A score of 2 indicates a minor risk with low impact and/or low probability. For comparison, risks with scores in the upper range (e.g., 20–25) are considered major risks that demand immediate mitigation. Minor risks, although not ignored, are often monitored rather than heavily resourced. This structured approach ensures procurement teams focus resources on the most significant threats while still maintaining oversight of low-level risks. By categorising risks this way, category managers create clarity for decision-makers and align procurement risk management with enterprise-wide frameworks.