Some organizations refuse to conduct a risk analysis on their projects. They state it is not needed because the organization has already decided to fund the project. Give two concerns about risk management the employee's statement made at these companies?