This document outlines the key steps in risk management: identify risks, analyze and prioritize risks based on potential damage and likelihood of occurrence, develop response plans to mitigate risks, establish reserves to account for known and unknown risks, and continuously monitor and adjust risk strategies as a project progresses. It also notes that effective risk identification requires a critical attitude and consideration of all possible problems based on the assumption that anything that can go wrong, will go wrong.