See this article on my blog. Includes an opinion about the number of risks faced by a typical enterprise. A list of 115 possible risks is also referenced in the blog posting.
http://blog.sms-ga.com/the-battle-between-risks-and-risk-management/
Tom O'Connor
Salt Marsh Solutions, Inc.