You and the project stakeholders develop a list of product risks and project risks during the planning stage of a project.