What are three risks of not including best HR practices into the management of a project? 1 paragraph Solution Managing Risk: Rules or Dialogue? The first step in creating an effective risk-management system is to understand the qualitative distinctions among the types of risks that organizations face. Our field research shows that risks fall into one of three categories. Risk events from any category can be fatal to a company.