The joint Australian/New Zealand Standard defines risk as:
It is usual to view risk as any source of disruption that may act as a barrier to the achievement of key business objectives. However, even apparently beneficial risks (e.g. the sudden collapse of a major competitor) can result in significant disruption.
The discipline of risk assessment may sometimes result in the identification of useful changes to processes that bring ongoing benefits irrespective of any crisis implications.
The risks that a business may face include both internal and external.
External risks include;
Internal risks are viewed in the context of the operational elements that support your critical business objectives; i.e. those objectives that would sink the business if they are significantly impeded. They include:
Standard and Poors have summarised the categories of risk to a business enterprise to be generally as given in the following diagram.
However, your business will of course have its own specific areas of risk.