Now then Roger.
Sit down quietly.
Gather your thoughts.
.....
Now what risks do you think might be significant?
List them all.
Now, Order them into "Most likely to happen down to Least likely to happen".
Now, write down the consequences of each happening.
Now, write down how the risks can be eliminated/limited.
It appears that companies do not want to share their risk assessments as they think it may give hackers a headstart ie shows them how the company thinks.
Shane