October 2014, Issue No. 190: Risk Management for Regulators – Part 2: Risk Identification