olemus
ISO 22300, 31073:
element, mis ise või koos muudega on võimeline tekitama riski
= element which alone or in combination has the potential to give rise to risk

näiteid
https://www.researchgate.net/profile/Adel_Mohammad/publication/274051021/figure/fig1/AS:294723270004763@1447278911627/Internal-and-External-risk-sources.png

http://securesense.ca/wp-content/uploads/2016/08/largeorg02.png

https://techaisle.com/images/techaisle-smb-midmarket-mobility-security-threat-sources-resized.jpg

ülevaateid
https://www.bankingexchange.com/c-suite/item/4348-don-t-confuse-risks-with-risk-sources

https://www.wibas.com/cmmi/rskmsp-11-determine-risk-sources-and-categories

http://chrguibert.free.fr/cmmi12/cmmi-acq/text/7938cba-9536.php

https://flylib.com/books/en/1.278.1/the_common_sources_of_project_risk.html

https://www.intelligentmanagementtrends.com/blog/2011-top-corporate-risks-in-eleven-risk-source-categories