Abstract: A change risk assessment system is disclosed. A question-and-answer approach is used to generate a risk assessment that can be broken down by various business categories. Scoring in example embodiments generates a risk level for each identified that takes into account high severity and low detectability characteristics of specific risks associated with a change or new project. The highest average risk priority number (RPN) from any category can be used to facilitate cross-project comparison of risk and reward balance. A risk level can be calculated for both an inherent risk, and a residual risk. The residual risk is calculated taking a mitigation plan into account. A color indication can be displayed for each identified risk, where the color indication is indicative of the risk level. The scoring for an identified risk can also be made to programmatically prompt escalation of the identified issue.