GRC - Governance, Risk & Compliance > HOPEX Enterprise Risk Management > Managing Risks > Risk characteristics > Analyzing Risks
Analyzing Risks
The aim of risk analysis is to obtain a good understanding of risks. You need to take into account:
• risk causes
• positive or negative risk consequences
The risk analysis phase associates a risk with:
• risk types
• risk factors
• consequences
• other risks
To analyze a risk:
2. Select a risk and open its properties.
3. In the Characteristics tab, expand the Analysis section.
A risk is characterized by:
• Risk Types: for more details, see Risk types.
• Risk Factors: for more details, see Risk Factors.
• Risk Consequences: for more details, see Risk consequences.
• Related Risks
*The incidents related to the risk appear in the Incidents page of the risk properties.
Risk types 
A risk type enables risk characterization. For example, a risk type can be regulatory, legal, technical, etc.
To create your own risk types:
1. In the navigation bar, click Risks > By Risk Type.
2. Click New.
3. Enter the name of the risk type and click OK.
The new risk type appears in the navigator menu tree.
*Similarly, you can create a sub-risk type from a risk type.
Risk Factors 
Many risk factors are defined within the framework of international, national or inter-professional regulations, or within the enterprise itself.
With each risk, you can associate one or more risk factors, sources of risks that have intrinsic potential to endanger organization operation. For example, dangerous chemical products, competitors, governments, etc.
Risk consequences 
To define consequences associated with a risk:
2. In the risk properties, Analysis section, Risk Consequences tab, click New.
The consequence created appears in the list of consequences associated with the risk.