Project risks are commonly taken to be what uncertainty does to the project's objectives; managing them means handling uncertainty across the whole project through a structured approach, written down in a risk management plan. These processes aim to limit the impact of possible adverse events and to seize opportunities for improvement and innovation, both in project processes and in added value for the project, the originating organizations, the customer and the other stakeholders. Uncertainty may concern the project processes or the project's product or service. The processes are: identifying risks; assessing risks; treating risks; and controlling risks (the standard's list cites 7.7.2 to 7.7.4, while the sub-clauses run 7.7.2 to 7.7.5). ISO 31000 covers risk management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.