What you need to do
Your organisation should have a framework for managing risk.
Minimum requirements for a risk management framework are:
- the organisation's risk policy identification of main stakeholders
- main approaches for identifying risks; assessing risks and reporting them; action to deal with risks
- responsibilities for managing risk and reporting to senior management, especially risks that cut across core business activities and organisational boundaries
Plan for cost management
Costs should be for the whole life of the project. Check the assumptions on which estimates are based, especially where there is no previous experience of this kind of project. See also Toolkit financial control of projects.