A global retailer uses a risk heat map to prioritize supply chain threats.Which two dimensions are plotted on a standard risk heat map?