What other project-level-type risk examples (that increase project length) can you identify?
Are there other project-level overprotections that should be reasons to decrease the project length?
How is this risk assessment different from a technical risk assessment?