Risk analysis Risk factors and critical points are identified and weighed through a process of risk assessment of the Group’s business segments, and the infrastructure processes, in order to update and define the three-year Internal Audit Plan which provides a breakdown based on level of risk for each segment to be controlled.