A PMO should organize for risk management, using existing IPTs. The PM may
also want to use contractors to support management efforts or have experts not
involved with the program perform independent assessments.
To use risk management as a program management tool, the information
resulting from each of the risk processes should be documented in a usable
form and available to members of the Government/industry program team. This
information will provide the basis for reporting risk and overall program
information, both internally and externally. Managing collection and
dissemination of risk information can be enhanced through the use of a
Management Information System (MIS).