The activities associated with defining the scope of the risk assessment or risk management program, and reviewing existing risk documentation and risk classification standards. This includes interviewing key stakeholders, obtaining/assessing/publishing documentation and classification standards and tools, and identifying sources of information. ARisk Breakdown Structureis a recommended tool to classify risks. It provides a standardized structure to guide risk classification. Typical classes include: