5.2.2.2 Categorize and group risks according to the defined risk categories