[BS 7799-3:2006] Risk assessment [SP 800-30] Risk assessment [Risk IT] RE2 process includes: RE2.1 Define IT risk analysis scope. RE2.2 Estimate IT risk. RE2.3 Identify risk response options. RE2.4 Perform a peer review of IT risk analysis. In general, the elements as described in the ISO 27005 process are all included in Risk IT; however, some are structured and named differently. [ISO/IEC 27005:2008] 
Risk assessment
C o n t e x t e s t a b l i s h m e n t
R i s k a s s e s s m e n t
R i s k t r e a t m e n t
R i s k a c c e p t a n c e
R i s k c o m m u n i c a t i o n
R i s k m o n i t o r i n g a n d r e v i e w