[ISO/IEC 27005:2008] Risk assessment [BS 7799-3:2006] Risk assessment [SP 800-30] Risk assessment [Risk IT] 
RE2 process includes: RE2.1 Define IT risk analysis scope. RE2.2 Estimate IT risk. RE2.3 Identify risk response options. RE2.4 Perform a peer review of IT risk analysis. In general, the elements as described in the ISO 27005 process are all included in Risk IT; however, some are structured and named differently.