Have a look at the perfect video.
And here is the pure list:
- Incomplete or inaccurate risk identification and analysis
- Bias on historical information
- Lack of management and leadership support
- Risk management is not aligned to strategic goals
- Inappropriate risk management software