structured process for risk identification.

record of the ownership of risk and issue management actions.

means of assessing the likelihood and impact of all of the risks.

record of risks, their impact and the actions taken to manage them.