A risk heatmap to assist reporting to the board based on a risk register that is used to log and manage all risks.