premise: Risk identification methods may include qualitative and quantitative ranking activities, management conferences, forecasting and strategic planning, and consideration of findings from audits and other assessments.
hypothesis: Previous assessments or audits are never considered when developing risk identification methods.