Identify risks, including where, when, why and how events could prevent, degrade, delay or enhance successful management of risk 4.