Conduct an extensive risk identification

p r o c e s s i n w h i c h y o u p r o v i d e a

comprehensive list of risks $($positive and

negative$)$ organised by risk category and

sub$-$category in the form of a risk register.

This should enable to organisation to

understand the risks making up its profile

and enable the risk prioritisation process

to begin.