Effective risk management requires a robust quality control culture within an organisation/project where individuals are encouraged to be a risk manager by asking questions and generating solutions. This can only be achieved with an appropriate risk management process. Such a process involves a series of well-defined steps to enhance organisational/project decision making through improved understanding of relevant risks and their likely impact.