A process to establish risk management priorities by comparing the level of controllability or other criteria. Risk mapping is a useful tool for prioritising risks by placing them on a risk profile and revealing which threats require management time and resources.