As I've covered before, Risk Management is relatively simple to do. Well, now we've made it even simpler.
The Risk Module allows a user to attach Risks to a Project or a specific Task. From there, they can assess a Probability of Occurrence, Impact, add Notes, and even Assign it to someone for Tracking. This person can then log updates against the task and everyone involved can have a complete history on the progress of the task, what mitigation strategies were taken, and when it was Opened/Closed.
It is currently available from the dotmods page.
CaseySoftware has other dotProject modules to be released shortly, so keep an eye out.