Roy and his team identified some risks during the first month of the My R & R Intranet Project. However, all they did was document the risks in a list. They never ranked the risks or developed any response strategies. Because the project has had several problems, such as key team members leaving the company, users being uncooperative, and team members not providing good status information, Roy has decided to be more proactive in managing risks. He also wants to address positive risks as well as negative risks.