Skip to content

Risk Identification

What is Risk Identification?

The process of finding, recognizing, and describing risks that could affect the achievement of organizational objectives.

Risk Management

Each of these is named in at least one of the same controls as risk identification. The number is how many controls name both.

What the standards actually require on risk identification

Requirements naming risk identification across 6 standards, quoted from the control text.

Identify sources of AI risk including data, model, system, deployment, and societal factors.

23894-6.4.2 · AI Risk Identification
IEEE 70002 controls

Clauses 8 + 8.1 + 8.2 establish ethical risk management and Clause 10 establishes validation of ethical outcomes. Per public IEEE 7000-2021 abstract + Wikipedia + academic literature (full IEEE text NOT reproduced): ethical risk identification covering: harm t...

IEEE7000-EthicalRisk-Identification-Analysis-Treatment-ValidationOutcomes · IEEE 7000 Clauses 8 + 8.1 + 8.2 - Ethical Risk Identification + Analysis + Treatment + Validation of Ethical Outcomes + AI Safety + Robustness + Adversarial Protection

Identify privacy risks across PII lifecycle including collection, use, retention, sharing, and disposal.

ISO27557-6.2 · Privacy Risk Identification

Identifying potential privacy risks to PII principals arising from the processing activities

29134-7.1 · Risk identification

Identify any climate related risks that have had or are reasonably likely to have a material impact on the business strategy, results of operations, or financial condition, and describe the actual and potential impacts of these risks.

SEC-CLM-01 · Climate Related Risk Identification

Questions people ask about risk identification

What is Risk Identification?
The process of finding, recognizing, and describing risks that could affect the achievement of organizational objectives.
Why is Risk Identification important for compliance?
Risk Identification is a key concept in Risk Management. Understanding risk identification helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Risk Identification?
Risk Identification appears in the requirement text of IRM Enterprise Risk Management Framework (Institute of Risk Management), ISO/IEC 23894:2023, IEEE 7000, ISO/IEC 27557:2022 - Organisational Privacy Risk Management, ISO/IEC 29134:2023. Across these standards we have identified 16 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Risk Identification?
Explore our compliance framework pages to see how risk identification applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Risk Identification applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.