Risk identification methods may include qualitative and quantitative ranking activities, management conferences, forecasting and strategic planning, and consideration of findings from audits and other assessments.
Analysis of findings from audits and strategic planning are just two possible components of risk identification methods.