Company XYZ has hired a team of consultants (systems analysts) to augment its own Project Delivery to work on the replacement of their Data Masking solution, but XYZ doesn't have a formal scope definition, they do have a rough timeline imposed by management, and a rough budget (gathered from industry research and consultants input). Project Manager from XYZ is saying that until we have a Gantt chart we do not have a project, so based on this decision the 2 teams are working independently. There are 3 high level risks that have been found, 

1) The required solution to be implemented has dependency on some of the other mission critical apps in the organization.

2) which were developed in-house no one has documentation on the current state of the applications.

3) Current Data Masking solution used to mask all personal information of clients in the organization is no longer supported.