Risk analysis is frequently carried out on projects in feasibility and project definition. However, in full development and initial production often the risk is not monitored and controlled, and many projects fail at this point. This paper describes some proposed methods making up an integrated risk management structure, based on project experience, particularly with the defence industry.