If I were a Chief Risk Officer for a company and tasked to identifying the areas where my company would be exposed to systematic and unsystematic risks. how could I take on an approach that would explain how systematic and unsystematic risks affect risk planning?

What type of approach would I be able to take and how can i identify 3 or more approaches suitable to describe systematic or unsystematic risks your company might face. If my company was to no be proactive in planning to defend against these risks what implications could arise that can affect efficiency?