What context?
The context will affect the approach, e.g.
- At what level of the organization?
- Strategic
- Project management, or
- Operational management
- What is the risk environment?
- Primarily regulatory
- Commercial
- Public safety, etc.
- What impact of consequences generally?
- Who are the stakeholders?
- Who benefits, who suffers