Risk cause risk source
Risk identification
Risk identification is "the process of finding, recognizing and recording risks". It "involves the identification of risk sources, events, their causes and their potential consequences."ISO 31000 describes it as the first step in a risk assessment process, preceding risk analysis and risk evaluation. In safety contexts, where risk sources are known as hazards, this step is known as "hazard identification".There are many different methods for identifying risks, including:
Checklists or taxonomies based on past data or theoretical models.
Evidence-based methods, such as literature reviews and analysis of historical data.
Team-based methods that systematically consider possible deviations from normal operations, e.g. HAZOP, FMEA and SWIFT.
Empirical methods, such as testing and modelling to identify what might happen under particular circumstances.
Techniques encouraging imaginative thinking about possibilities of the future, such as scenario analysis.
Expert-elicitation methods such as brainstorming, interviews and audits.Sometimes, risk identification methods are limited to finding and documenting risks that are to be analysed and evaluated elsewhere. However, many risk identification methods also consider whether control measures are sufficient and recommend improvements. Hence they function as stand-alone qualitative risk assessment techniques.
trigger bring about initiate provoke instigate