Stakeholders can identify risks through one or more of the following techniques:
- Expert interviews
- Independent assessments
- Use of risk templates
- Project retrospectives
- Risk workshops
- Calling on past experience
By involving the broadest possible sample of stakeholders, the risk identification process is most likely to identify most of the significant product quality risks.
The risk identification often produces by-products, i.e., identification of issues which are not product quality risks. Examples include general questions or issues about the product or project, or problems in referenced documents such as requirements and design specifications. Project risks are also often identified as a by-product of quality risk identification but are not the main focus of risk-based testing. However, project risk management is important for all testing, not just risk-based testing.