risk and assumptions PMO