. . . "These will include aspects such as tools to help carry out qualitative risk analysis, policies, procedures and guidelines for risk management, and historical information including lessons learned from previous similar projects." .