We document, mitigate, and regularly update our project risk lists.