I recommend starting with determining the context. For the internal issues, think about that kind of issues systematically arise in the reports and internal meetings (complaints, successes, costs, customer satisfaction, performance indicators, ...). Classify the positive internal issues as strengths and the negative internal issues as weaknesses.
I use the PESTLE analysis framework in order to support the discipline of questioning the mind around various areas that may affect an organization (politics, economics, social, technology, legislation and environment) to determine external issues. After the PESTLE analysis I recommend collecting positive external issues as opportunities and negative external issues as threats and organize the information in a SWOT matrix.
Then you can combine strengths with opportunities or with threats, or combine weaknesses with opportunities or with threats, and from those combinations see if you can determine risks or opportunities.
Below you can see some examples of application of this methodology: