Identifies the risks associated with the daily operations of a business, rather than actions taken to manage these risks.