A PMO should organize for risk management, using existing IPTs. The PM may also want to use contractors to support management efforts or have experts not involved with the program perform independent assessments.
To use risk management as a program management tool,
the information resulting from each of the risk processes should be documented
in a usable form and available to members of the Government/industry program
team. This information will provide the basis for reporting risk and overall
program information, both internally and externally. Managing collection and
dissemination of risk information can be enhanced through the use of a
Management Information System (MIS).