Identifying risk management weaknesses and strengths from the successes and failures of previous projects.