Identify the risks to an information system
Create a full list of events that may prevent, degrade or delay your organisation in achieving its business objectives.
Run a workshop with stakeholders
Running a workshop with the key stakeholders of the information system allows you to more accurately identify its risks.
Describe the risk scenarios
Find out what risk scenarios are, and how to write clear risk scenarios that will help you to analyse them during the risk assessment.
List the causes of each risk and the impacts if they happen
Making these lists helps to give your risk assessment team a clear view of the risks facing your organisation.