The methodology for identifying risks includes inventorying assets, identifying risk sources, identifying stakeholders, gathering information, using checklists and quality methods, setting parameters for quantitative analysis, creating a risk register, conducting scenarios and stress tests, prioritizing identified risks, establishing validation criteria and periodic review