Map out how threats or opportunities are linked to your objectives and you can link your risk assessment directly to what the organization is trying to achieve.
You need to drill into what the specific point of each assessment is before you start but the first thing you need to do is to remember that this is a means to an end, not the end in itself. This is a critical part of your organization’s decision-making process, not something that sits in isolation.
Conduct an MVA - a minimal viable assessment - that focuses on the key components to get you the results you need.
A risk is something that will have an effect on your objectives, good or bad.
Keep things simple - even though it's hard - to make your risk management system more effective