If I were a PM running a risk management meeting, I would first create a timeline of events with my team from the time the device is shipped out of the manufacturing facility till the time it is implanted in the patient and even after that. Then we would work through the timeline, identifying any hazards that may occur at each step. This process creates a structured framework for identifying risks, and reduces the possibility of forgetting something. I personally like this approach better than just a brainstorming session where everyone tries to think of potential risks that may occur.