Lines of program management, project management, and portfolio management must all be involved in the risk identification process. Risk assessment should be circular. Once a threshold is met, the situation should be escalated for review and decision-making. Project Management Institute members and Standards subscribers can get more information on risk assessment at the program level here: http://ow.ly/vIOt50MfyEI | Project Management Institute