The Risk Exposure configuration page in SAP Ariba Supplier Risk lets risk managers tune the algorithm that converts raw incident data into an overall exposure score. They can (1) change the spend-based denominator that normalises incident counts (A), (2) assign a relative weight to each risk category so that some categories influence the composite score more than others (C), and (3) set the numeric break-points that label a supplier’s score as low, medium, or high exposure (E). These three elements fully determine how exposure scores and coloured risk tiles appear throughout the solution.

B. Information/data sources are selected in the Information Sources workspace, not in the Risk Exposure interface.

D. Email-alert triggering incident types are configured under Notifications, separate from Risk Exposure; they are not editable on the Exposure page.

1. SAP Ariba Supplier Risk – Administration Guide, “Configuring Risk Exposure,” SAP Help Portal, section 5.3, pp. 52-55 (Q3 2023 release).

2. SAP Ariba Supplier Risk Implementation Guide, “Spend Denominator and Category Weight Settings,” pp. 31-33 (2022).

3. SAP Ariba Supplier Risk – User Guide, “Setting Exposure Thresholds,” p. 47 (2023).

4. SAP Ariba Supplier Risk – Email Notifications, “Managing Incident Notification Rules,” section 7.1, p. 64 (2023) – shows incident alerts configured outside Risk Exposure.