The Cybersecurity Inherent Risk Profile Worksheet (CAT) (FFIEC) addresses the following categories:

Technologies and Connection Types
Delivery Channels
Online/Mobile Products and Technology Services
Organizational Characteristics
External Threats