Risk analysis Risk factors and critical points are identified and weighed through a process of assessing the risk of the Group’s business segments and infrastructure processes, in order to update and define the three-year Internal Audit Plan which provides a breakdown based on risk level for each segment to be verified.