Which of the following methods is NOT typically used in the risk identification step?

In the context of risk management, risk identification is a critical step where potential risks that could affect an organization's objectives are recognized. Among the methods mentioned, social media investigation is not typically considered a standard approach for identifying risks.

Risk identification commonly employs methods that focus on tangible and quantifiable metrics or formal processes. For example, net income or financial analysis examines financial data to identify economic risks, while physical inspections involve evaluating the actual condition of assets or facilities to uncover potential hazards. Compliance reviews assess adherence to regulations and standards, which can help reveal legal and operational risks.

Social media investigation, while it can provide some insights into public sentiment or reputation risks, is not a systematic or standardized method for risk identification. It tends to be more exploratory or reactive rather than a foundational tool used in a comprehensive risk management framework. Therefore, it stands apart from the other more structured risk identification methods.