The process of identifying individual risks as well as sources of overall risk and documenting their characteristics.