Some Tools for Risk Identification
Some of these tools are processes and procedures. Some are more tangible things like checklists. The art of applying these tools is to combine the tools, both the human ones and the tangible ones, to get the broadest perspective on project risks. That means looking at it from several perspectives through several sets of eyes. The team members are intimately involved with risk identification, but you may also want the customer, outside technical experts, professional associations, and suppliers involved.

Checklists
Checklists are lists of questions or issues that may or may not apply to your project. Checklists are good because they remind you to consider many factors. The best checklists are built from the organization’s history files of risks that have occurred on past projects.

Risk Taxonomies
Risk taxonomies are structured checklists built around whole categories of risk (such as organizational relationships or staffing). SEI has published a risk identification taxonomy that is a model for many types of projects beyond software
development.