I believe that all the responses here are very valuable and they offer very good methodologies on how risks are identified. From my experience, Risk identification starts from the intended use, intended users and use environment. Once all these have…   Read more»