One of the most successful risk workshops I ever ran was for the implementation of very large application in a bank. I pulled in a sample of people from the de

One of the most successful risk workshops I ever ran was for the implementation of very large application in a bank. I pulled in a sample of people from the development team and proposed the following scenario: It's the Monday morning immediately after our implementation, and you come in to the office to find a bunch of senior managers discussing a big issue with the system. What went wrong? That brought up a huge number of potential issues that were sitting in the back of the engineers minds that have never been written on any risk register, etc. We talked them through, got comfortable that some of them weren't really likely/possible, and then worked on mitigations for the others (mostly via test plans) In the end, the implementation was a success.