PMO risk checklist