Research some risk assessment best practices and/or templates. How would you apply them to a medium/large network?

Risk Assessment in networks

Risk Assessment is determining what risks could happen, how likely they are to happen and what the consequences of them are.
Research some risk assessment best practices and/or templates. How would you apply them to a medium/large network?