To be effective, risk management needs to be an ongoing and meaningful element in the management of the plan. The plan needs to do more than a ‘tick and flick’ exercise at the commencement of the project; it needs to identify who is responsible for reviewing risks on a regular basis, and how this will be done. It is important to ensure risk management plans remain current and become a regular aspect of the performance reporting and review of a project, with responsibility for particular risk mitigation activities assigned to individuals who are accountable to the programme or project owner