The Spanish Data Protection Authority (AEPD) publishes a new Data Protection Impact Assessment Guide which also includes guidance on Risk Management. The stated purpose of the guidance is to help organisations comply with the relevant regulations.
Source