Once identified, risks need to be analyzed to understand their potential impact and likelihood. This involves both qualitative and quantitative methods. Qualitative analysis uses expert judgment and scoring systems, while quantitative analysis employs statistical models and financial metrics like Value at Risk (VaR).