Lastly there are the costs associated with managing risk on projects. Each project faces a unique risk challenge, and managing this incurs costs for assessing risk and for addressing risk.
最後有些成本與管理專案中的風險有關，每個專案面臨其獨特的風險挑戰，而管理這些風險將導致風險評估與處置成本。

•Assessing risk : These are the costs of implementing the risk process on the project, including spending time and resources in risk identification workshops or interviews, performing risk assessments and analyses, attending risk reviews, writing risk reports etc.
•評估風險：這些是在專案中實施風險程序的成本，包括在風險辨識討論會或訪談中所消耗的時間與資源、執行風險評估與分析、參加風險審查、以及撰寫風險報告等。

•Addressing risk : This covers the cost of executing risk response plans, those actions which were not originally in the project plan, but which are deemed necessary in order to deal appropriately with identified risks. Proactive actions are needed to avoid or reduce threats, and to exploit or enhance opportunities. Contingency and fallback plans must be put in place in case risks occur. These costs would not have been incurred if risks had not been identified, but they are necessary to optimise the chances of achieving project objectives.
•處置風險：這涵蓋執行風險回應計畫的成本，這些行動原本不在專案計畫中，但被認為是必要的，以便適切地應付被辨識出的風險，主動預防性的活動需要用來規避或降低威脅、及促成或增強機會，緩衝量及應變計畫必須要設置以便在風險發生時使用，如果風險未辨識出則這些成本便不會發生，但為了使專案達成目標的機會最佳化，這些成本是必須的。

If an organisation is serious about managing its risk, it must be prepared to pay these costs. This is particularly true of projects, which tend to have fixed budgets. Risk management will never be effective if it is seen as an optional zero-cost extra. The cost of assessing risk must be included in the overall project management budget, and there must be adequate contingency in the project budget to cover the costs of addressing risks.
如果一個組織很嚴肅的看待風險管理，則必須準備要付出這些成本，對於意圖維持一定預算的專案而言這更是事實，如果被視為一個零成本的額外選項，那風險管理永遠不會有效果，評估風險的成本必須被包括在整個專案管理的預算中，且專案預算中必須有適量的預備金以涵蓋處置風險的成本。

Of course there is a cost-benefit relationship from investing in risk management. Risk management delivers a wide range of benefits to the organisation and to its projects, clients and staff. Although it is hard to measure the return on investment for risk management, it is certain that no benefits will be realised unless the organisation is prepared to pay these costs. Indeed, not paying the cost to implement risk management exposes an organisation to another unnecessary cost - unmanaged risk. This includes threats which turn into problems which could have been avoided, as well as missed opportunities which could have delivered extra benefits.
當然投資在風險管理上也有成本效益關係，風險管理可以給組織及其專案、顧客、員工帶來廣泛的效益，雖然風險管理的投資報酬很難衡量，然而除非組織準備好要付出這些成本，否則必然沒有效益可以實現。事實上，不付出實施風險管理的成本，會使組織增加另一項非必要的成本-未被管理的風險，這包括了產生無法避免的問題之威脅，以及失去可以帶來額外收益的機會。