Involves placing risks into various categories and establishing key risk indicators in accordance with the probability they will materialize and the magnitude of their impact on five areas: finances, people, environment, regulatory compliance, and reputation.