Risk identification provides the foundation for risk management. There are various methods to identify risks such as preparing checklists, conducting on-site inspections, analyzing financial statements, creating flow charts, and interacting with employees. Sources of risk can be internal or external and come from a company's environments. Risk exposures include physical asset exposures, financial asset exposures, liability exposures, and human asset exposures. Traditional risk identification observes past losses while modern approaches identify risks before losses occur using tools like risk analysis questionnaires, financial statement analysis, flow charts, on-site inspections, interactions with other departments, contract analysis, and statistical records.