Conduct an extensive risk identification p r o c e s s i n w h i c h y o u p r o v i d e a comprehensive list of risks (positive and negative) organised by risk category and sub-category in the form of a risk register. This should enable to organisation to understand the risks making up its profile and enable the risk prioritisation process to begin