The first step in creating an effective risk management system is to understand the qualitative distinctions among the types of risks that organizations face. According to Kaplan and Mikes (2012), risks fall into one of the three categories: preventable risks, strategy risks and external risks. This notes builds on this three types of risk to present a panoramic view of risk analysis.