Identifying incidents both external and internal to the organization that could affect the achievement of the organizations objectives
Key Management Questions:
What could go wrong?
How can it go wrong?
What is the potential harm?
What can be done about it?