This chapter looks at risks, issues, change control and information management. The management of risks and issues on small projects or work scopes is relatively straight forward. People need to concern themselves with information, which is explicitly mentioned or strongly implied, including information relating to accountabilities, the solution and its development, plans, progress assessments, reviews and audits, contracts, reports and communications. Without knowing the relationship between the different groups of information, a single information set, no matter how good it looks, will be unreliable. Despite the explosion in the different ways of recording, transmitting, receiving and storing information, much of the work associated with the management of portfolios, programmes and projects is dealt with in conventional documents. Much of what used to be held in documents is now held in applications as data assembled to provide the information needed.