One final point, and one to ignore at your peril.

It is no good having the best risk analysis in the world if nobody has read it, and nobody takes action as a result.

Risk management, and crucially, the thinking about ‘what could possibly go wrong, and what should we do to prevent it?’ should be a key part of your strategy development. It needs to be integral to your organisation at all levels.