Specifications include, but are not limited to: The Risk Assessment Task defines how the QMS Consultant will support a project’s overall risk management efforts. The QMS Consultant shall refer to the project’s Risk Management Plan. Authorized Purchaser’s project team retains the primary responsibility for executing the project’s risk management activities, while the QMS Consultant provides a supporting role through its independent efforts. Within the QMS Consultant’s role of completing Task 2 Quality Planning, Task 3 Quality Control (including Task 5 Independent Solution Testing), and Task 4 Quality Assurance; it must identify risks and provide recommendations for risk avoidance and mitigation strategies related to work product, process, and the overall project. Risk management includes the identification of risks, the thorough assessment of the probability and the impact for the occurrence of risks, and the planning of viable responses that include, but are not limited to, mitigation, contingency, and avoidance strategies. Identification of Information Security risks should also be an essential part of the scope of the QMS Consultant’s initial and on-going risk assessment The QMS Consultant shall establish a quality management system for the Project. The typical system is comprised of a quality management plan that includes all requisite quality standards, quality checklists for quality control reviews, quality control and quality assurance report templates, and quality control and quality assurance processes. The quality management system must be specific and unique to the Project. The established quality management system should define the Project work tasks and resourcing that will add value and reduce risk subject to the constraints of available Project resources and applicable organizational policies, Oregon Revised Statutes, Oregon Administrative Rules, and statewide policies and standards. This task monitors Project results to determine if they comply with stated Project requirements. Project results include both work product results, notably deliverables, and project management results, notably schedule and cost performance. In general, this Task includes the: