The second stage of risk management lifecycle involves analyzing the risks identified. This involves expert judgement or first level subjective analysis to evaluate which risks are worth spending more time on. This article addresses how to report on such an analysis done.