Risk identification is the process of determining risks that could potentially prevent the program, organization, or investment from achieving its objectives. It includes documenting and communicating the concerns.