I perform product risk assessments and work in Operational Risk Management. However, I consult with experts from all relevant business units to obtain their concerns and feedback to ensure it is a balanced assessment.
I found alot of good guidance online through a google search.