Our approach to risk identification, presented in the subsequent sections, is characterized by the following features: - explicit modeling of software process to control the scope of risk identification, - using risk patterns to identify potential risk factors. First