The purpose of documenting risk categories and sources is to better guide risk management activities and reduce variability in identifying risks.