______ is a visual analytical tool that identifies all risks to an organization and indicates their frequency, on a scale from low to high, and their potential impact, or severity, on a scale from low to high.

• A. Heat mapping
• B. Risk mapping
• C. Risk register
• D. Scatter plot

Answer: (B)

Understanding how risks are visually prioritized helps you see why risk mapping fits best. A risk map is a visual analytic approach that lays out each identified risk on a grid defined by two dimensions: how likely the risk is to occur (frequency or likelihood) and how severe the impact would be if it occurs. By plotting risks on this map, you can quickly see not only which risks exist but which ones pose the greatest threat, typically highlighted by moving toward the top-right of the matrix. This makes it a comprehensive, organization-wide view that guides where to focus mitigation efforts and resources.

A heat map is similar in spirit because it uses color to convey intensity, but the term risk mapping emphasizes the process of identifying and placing risks on the likelihood–impact grid itself. A risk register is just a list of risks, not a visual prioritization tool, and a scatter plot is a general chart type that doesn’t inherently capture an organization-wide risk landscape in terms of both probability and consequence.