... . They are often called risk heatmaps for obvious reasons due to their colouring, where green means a risk is acceptable, amber tolerable and red unacceptable. A number of SCRM frameworks and modelling tools have been proposed in the literature for identifying, assessing and mitigating risks...