The first action you must take to participate in enterprise risk management is to identify the risk events. This is a foundational step because it allows you to understand what potential risks could impact the organization. Without identifying the risks, you cannot assess their effects or determine who will be responsible for managing them. Identifying risk events is the initial step that informs all subsequent actions in the risk management process.