Identifying risks is an old management activity now reinvigorated within the context of the IT Infrastructure Library (ITIL) service lifecycle, found in ITIL version 3 (ITIL v3).¹ Risk identification is the necessary first step to risk mitigation, and a fresh way of looking at risks through the prism of service creation and delivery can heighten not only an understanding of risks, but an awareness of what management actions are required to avoid them.