I agree that #4 “Risk management is not a lifecycle process” and that it is a mistake to think that once the development process is completed that the risk management documentation ends. I agree with @smk45 that it should be…   Read more»