This report concerns implementing formal risk management practices at transportation agencies. The report begins by defining risk using the ISO:31000 definition and then by justifying why all agencies should be concerned with explicitly managing risk. The report continues to enumerate strategies for effective risk management, such as developing an explicit risk management structure, and achieving a culture that prioritizes risk management.