Risk identification methods may include qualitative and quantitative ranking activities, management conferences, forecasting and strategic planning, and consideration of findings from audits and other assessments.
Previous assessments or audits are never considered when developing risk identification methods.