Winch (2002) claims that the first step in the RMP is usually informal and can be performed in various ways, depending on the organization and the project team. It means that the identification of risks relies mostly on past experience that should be used in upcoming projects. In order to find the potential risks, an allocation needs to be done. This can be decided and arranged by the organization. In this case, no method is better than another, since the only purpose is to establish the possible risks in a project