Pretty good general discussion of the topic. The risks you list tend to be more effects than causes, though. Without identifying the causes, it's much harder to develop solid avoidance, mitigation, and contingency plans. Also, you might want to mention measuring your risk exposure - you can often set up indicators to forewarn you of a risk manifesting itself.
Fog Creek Home