All projects perform risk assessments and how to remediate.
Realistically this could be done with the questionnaire framework in compliance. But we need a bit more functionality.

1. We can enter a risk within the questionnaire but there needs to be a evaluation of the risk for high, medium, lows, this can be a risk to the schedule or to the cost
2. There needs to be linkage to remediation actions ie the action items that if completed, it reduces the risk level by how much

Those are just some samples on how to include risk management into project planning. I encourage others to add to this.