When assessing project risks, people tend to be either overly optimistic or depressingly pessimistic. Where should a PM and the team draw the line? A single work item not following the plan can lead to myriad risks, multiplied by another myriad of potential solutions. When can you be confident that your contingency plans are adequate? Is there a concept such as "enough planning"?