  Risk is part of the fabric of every business; surprisingly, there is little
work on establishing best practices for systematic, repeatable risk
identification, arguably the first step of any risk management process. In this
paper, we present a proposal that constitutes a more holistic risk management
approach, a methodology for computer-supported risk identification is proposed
that may lead to more consistent (objective, repeatable) risk analysis.
