Risks and other threats can be hard to eliminate, but when they have been identified, it is easier to take actions and have control over them. If the causes of the risks have been identified and allocated before any problems occur, the risk management will be more effective (PMI, 2004). RM is not only solving problems in advance, but also being prepared for potential problems that can occur unexpectedly.