Level Enterprise
The sources of risk to assets and services are identified and the categories of risk that are relevant to the organization are determined.