Simplified, risk management is the process of identifying things that can go wrong, having a plan for handling those things if they do go wrong, and executing that plan. Procurement risk management is risk management applied to handling things that can interrupt the incoming flow of purchased goods and services and the costs thereof.