Formats and related files
Agencies must complete risk profile assessments (RPA) for all 'significant' investments identified on multi-year plans.
Agencies must provide to Treasury an RPA for any investment proposal that has a medium or high risk profile.
The RPA identifies, at a high level, risk indicators for a project. It is not a risk management tool, and does not replace the need for agencies to perform their own detailed risk analysis and management across a project's lifecycle.