What this template is for
A 5×5 risk assessment matrix with P×I scoring, automatic heat mapping, and supplier risk ranking for supply chain risk management. This downloadable template helps procurement professionals streamline their risk assessment process — no need to build complex spreadsheets from scratch.
Risk that isn't quantified gets ignored until it becomes a crisis
Every procurement professional has a mental list of suppliers they "worry about" — but a mental list does not survive an audit, inform a budget, or convince a CFO to approve dual-sourcing investment. A 5×5 risk assessment matrix with Probability × Impact (P×I) scoring converts those gut feelings into quantified, comparable risk scores across your supplier base. Each supplier is assessed on the same five categories using the same 1-5 scale, producing a risk ranking that leadership can act on. The heat map makes high-risk cells immediately visible in red, so a procurement director scanning the dashboard can identify critical suppliers in seconds, not hours.
Five risk categories that reflect how procurement teams actually think about risk
Generic risk matrices use vague categories like "Strategic Risk" and "External Risk" that mean nothing in a procurement context. This template uses five categories that procurement and supply chain teams recognize: Financial (supplier bankruptcy, cash flow problems), Operational (capacity constraints, quality failures, delivery disruption), Geopolitical (tariffs, sanctions, conflict zones), Compliance (regulatory violations, forced labor exposure), and Cybersecurity (data breaches, ransomware at supplier facilities). Each category has its own scoring guidance with procurement-specific examples, so the operations manager and the compliance officer evaluating the same supplier arrive at consistent scores.
What's included
- 5×5 risk matrix with automatic Probability × Impact calculation
- Color-coded heat map (green/yellow/orange/red) with conditional formatting
- 5 risk categories: Financial, Operational, Geopolitical, Compliance, Cyber
- Supplier risk ranking with total score and criticality level
- Risk mitigation action plan template with owner and deadline
Who should use this
- Supply chain risk managers performing periodic supplier risk assessments.
- Procurement directors preparing supply chain risk reports for executive review.
How to use it
- Enter supplier name and assessment date
- Score each of the 5 risk categories for Probability (1-4) and Impact (1-4)
- Review the auto-generated heat map — cells turn red for high-risk areas
- Check the Risk Ranking table to prioritize suppliers by total score
- Complete the Mitigation Plan for any supplier scoring High or Critical