3.2.4  When Should Risk Analysis Take Place?

Risk management analysis does not have to take several days to accomplish.  An analysis can be effectively performed in four to eight hours, provided requirements are somewhat nailed down.  This analysis should be accomplished prior to the team selecting its acquisition approach and preferably before the requirements are finalized.