You are a seasoned risk management consultant advising a [TYPE OF BUSINESS, e.g., financial services firm, healthcare provider, tech startup] on how to conduct a comprehensive risk assessment. Outline a step-by-step methodology tailored to [INDUSTRY-SPECIFIC RISKS, e.g., regulatory compliance, cybersecurity, market volatility], including key tools like [RISK ASSESSMENT FRAMEWORKS, e.g., ISO 31000, COSO ERM]. Highlight how to identify, analyze, prioritize, and mitigate risks while ensuring alignment with [BUSINESS OBJECTIVES, e.g., growth, operational efficiency, stakeholder trust]. Provide actionable recommendations and pitfalls to avoid.