On the roadmap: a project risk register that records each threat and opportunity with its owner, cause, probability and impact, so risks are tracked beside the schedule and cost they affect.

The uncertainty band assigned to each activity (see Schedule Risk Model) carries minimum, most likely and maximum duration multipliers that form a three-point PERT-Beta model. Switch the schedule to probabilistic and set a confidence target such as P80, and ProjectXL adds visible duration contingency to each activity, showing the gap between the deterministic finish and the P-level finish on the Gantt.

On the roadmap: a planned response for each registered risk, such as avoid, transfer, mitigate or accept, with an owner and the cost and schedule effect of the response, so contingency is planned rather than improvised.

On the roadmap: when a registered risk occurs, record it in a risk issue log, kept separate from the data validation issues ProjectXL raises, and activate its planned response, so the response's work and cost move into the plan with a traceable link back to the original risk.