In relatively stable or mature environment checklists can often be of value, these provide a list of ‘common’ risks that you would expect to be considered. This approach can drive consistency, but is less effective if the area is novel or changing rapidly. A comprehensive checklist detailing all of the possible risks that an organisation could face is often referred to as a ‘risk universe’. Creating a risk universe can help the organisation understand the risks it faces in terms of their origin and nature as wall as being used as a checklist in their risk identification activities.