•known risk factors are the input for a project;
•the project risk management process collects information about the risks and failure of the project, which leads to new risk factors;
• these new factors are added to the list of known risk factors, together forming the input for the next project.