Risk Assumption

Which is easier to identify, risks or assumptions? Why? Which is harder to manage? Why?