high level risk assessments for databases

are there any common types of risks that can be used for a high level risk assessment of critical databases. I was thinking of broad categories such as security, performance, availability etc and then to retrieve some assurances on controls in place to support these/mitigate against risks associated with each category. These are a blend of MSSQL and Oracle. I appreciate there will be lots of controls required to support each, but getting the high level risks would be useful start point and I didn't want to miss anything critical before digging into the risk mitigations.