customer risk, geographic risk, and product/service risk — provides the structure for most risk rating methodologies.