Identify, describe and categorize the risks affecting your projects, processes, assets and any other criticalities of your enterprise. Use possible and plausible scenarios to measure and justify risks and capture the pertinent information on the risk register.