The Risk List identifies, in decreasing order of priority, the events that could lead to a
significant negative outcome. It serves as a focal point for project activities and is the basis around which
iterations are organized.
The Risk List should capture the critical and serious risks-if you find this list extending beyond 20, carefully
consider whether they are really serious risks. Tracking more than 20 risks is an onerous task.