🔴 Risks — what could go wrong

Things that have not happened yet but would hurt if they did.

Every risk here is written as a cause-and-effect sentence, not a worry. "The vendor might be late" is a worry. "If the SSO vendor misses 6 Aug, then UAT starts without single sign-on and slips two weeks" is a risk you can act on.

Each item carries a Probability and an Impact. Sort the Table view by those two columns and the top of the list is your agenda.

A risk that has already materialised is no longer a risk. Move it to Issues.