This white paper describes a risk model for project risks. The risk model used is the same model used for operational risk (5X5). However, for good reason the model assumes that we will only need three levels of risk and therefore only two levels of risk management. It promotes a periodic review throughout the project of this assumption. It gives examples of 37 exposures under 4 categories of operational risk.
White paper describing a risk model for project risks.