There could be multiple ways to identify risks. To my understanding, following lists can be considered:

Identify the hazards that could possibly affect the safety of your medical device.

Document the known and foreseeable hazards that could affect the safety of your medical device.

Use your risk management file to maintain the documents that identify and describe the hazards that could affect the safety of your medical device.