It is very important to address risk in a system before even starting to develop. There are a few types of risk in every project that can be classified.

• Requirements risk - Disaster scenarios have to be outlined in an early stage by the functional decision maker. He knows best what could be the worst thing to happen to his business. Special use cases that describe these disasters have the highest priority.
• Technological risk – Does the technology that is chosen or required fit the functional requirements? Can it deliver the functions that the users need?
• Skills risk – Are the available team members able to build the required application? If not, then don’t start, but demand more or other team members.
• Contextual risk – Are there any political forces that could possibly get in the way of your project, legal consequences or people with hidden agendas? Think about this kind of risk, and only document it if you don’t enlarge the risk by doing so!