Admin > Vendor Rating settings > Risk Assessment