Definition(s)
Risk Identification
Process of finding, recognizing, and describing potential risks.
Sample Usage: During the initial risk identification for the facility’s risk assessment, seismic events were chosen as scenarios to consider because of their potentially high consequences.
Source: DHS Risk Lexicon, U.S. Department of Homeland Security, 2010 Edition. September 2010 Regulatory Guidance
Risk Identification
Process of finding, recognizing and describing risks.
[SOURCE: ISO Guide 73:2009]
- Note 1 to entry: Risk identification involves the identification of risk sources, events, their causes and their potential consequences.
- Note 2 to entry: Risk identification can involve historical data, theoretical analysis, informed and expert opinions, and stakeholders’.
Source: ISO/IEC 27000:2014, Information technology — Security techniques — Information security management systems — Overview and vocabulary, Third Edition, January 2014. Global Standards
Risk Identification
Process of finding, recognizing and describing risks (1.1).
NOTE 1 Risk identification involves the identification of risk sources (3.5.1.2), events (3.5.1.3), their causes and their potential consequences (3.6.1.3).
NOTE 2 Risk identification can involve historical data, theoretical analysis, informed and expert opinions, and stakeholder’s (3.2.1.1) needs.
Source: ISO Guide 73:2009(E/F), Risk Management – Vocabulary, First Edition, 2009. Global Standards