1. Personnel not really familiar with the risk terms
2. Personnel lack of understanding of the organisation, function or process being risk assessed
3. The organisation culture is unsupportive towards the risk management implementation
4. The responsibility and ownership of the risk implementation action is unclear
5. How the risk should be communicated