A. Infrastructure risks of the complex information system
B. Project risks of the complex information system
C. Application risks of the information system
D. Information asset risks
E. Business continuity risks
F. Information service suppliers and IT outsourcing risks
G. Risks of external enterprise information system
H. Strategic risks of the information system