In this article we will show that risk analysis and risk management are continuous processes and not just the mandatory activity that it often is in projects, because "you have to manage your risks you know...". Risk analysis and risk management can be done in an effective way.