thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Risk Identification

Process of finding, recognizing, and describing risks that could affect objectives.

Definition

Risk identification uses techniques such as asset and threat inventories, interviews, workshops, checklists, threat modeling, vulnerability scans, and scenario analysis. Each identified risk should be documented with its cause, event, and consequence. Risks are recorded in a risk register for analysis.

Example

A workshop identifies the risk that a key SaaS provider outage could halt order processing.

Exam tip

Identification precedes analysis; you cannot rate risks you have not identified.

Related terms