Systematic classification of risks according to strategic, operational, communicative, and governance-based criteria.