Identifying by function is a good system, and historical information is always a good place to start. What other ideas do you have? Who would you consult during the risk identification phase? How would you start the process of developing a risk management plan for the project?
(Good quality and original response, please. No essay response. A paragraph or two will be fine.)