To have a meaningful risk identification strategy, what will a company do?

not sure the question is correctly formulated. a company would set up a strategic goal to timely identify risks for example. for this to happen they should have a risk management PROCESS embedded in its current other processes