-- Create an environment where people can talk about things they hope won't happen.

-- Take a risk census. Hold a brainstorming session to tally team members' worst fears for the project.

-- Validate your census results. You should have a definite number of risks -- not just an estimate. The most common number for projects today is between 20 and 50.

-- Identify each risk type. Is it binary -- something that happens or doesn't happen -- or is it contiguous -- something that happens to some extent and causes a degree of damage?

-- Gauge the potential impact, even if it's just a guess.