Conduct an extensive risk identification process in which you provide a comprehensive list of risks $($positive and negative$)$ organised by risk category and sub$-$category in the form of a risk register. This should enable the organisation to understand the risks making up its profile and enable the risk prioritisation process to begin.

$$ Organizing risks by categories and sub$-$categories $($e$.$g$.,$ operational, financial, strategic, compliance$)$ demonstrated an understanding of risk management frameworks. Many students focused solely on negative risks and failed to identify opportunities $($positive risks$)$ that could be leveraged by the organization. with references