I wouldn't bother asking this question if it was easy to find. In the past I've used a risk-analysis-checklist which was split up in serveral factors.
For example, there are Human factors, Hardware is one, Organization is one of them and Environment too.
I've lost this list and I wonder if anyone here could share this checklist with me. I've found a partial list in Dutch which helped me out for the factors except Organization and Environment.
If you have a question about my question(?), please add a comment and I will try to make it more clear.