Krane et al [23] [24] address the issue of how risks, once identified, are then distributed amongst different risk categories. This analysis provides a comprehensive general overview of how to deal with different risk items using a risk register. This comprehensive study proposes a basic categorization based on the levels of hierarchy of management objectives. They define the three categories as follows: