1. Do a risk management plan: list of risks involved, level of the risk, the likelihood of the risks of occurring, management plan, who is responsible for what, the implications/consequences to the system/business. Can be done in a table.
2. Discuss in detail the recommendations/controls that should be put in place for the project to be successful. Can be discussed in terms of system, data, people, etc. Should not be too brief.