You can start looking at your environmental aspects and impacts and determine what can go wrong and provide undesirable consequences like emergency situations or breakdowns.
Then look for interested parties and determine possible changes for the future and their potential impact in your organization. For example, customer requirements may demand more chemicals, environmental legislation may be more demanding.
PESTLE analysis may be useful to frame thinking about risks related with policy, technology, economy and social movements. Although about ISO 9001, perhaps the technique that I use and present in this free webinar on demand - Context of the organization, interested parties, and scope - - may be useful for you to work with context and interested parties to determine risks.
Please check this information below with more detailed answers: