There are five core steps within the risk identification and management process. These steps include risk identification, risk analysis, risk evaluation, risk treatment, and risk monitoring. Risk Identification: The purpose of risk identification is to reveal what, where, when, why, and how something could affect a company’s ability to operate..