A six-month, USS1.2 million project is two months completed. The project has 3 high, 6 medium, and 2 low risks, with a 10% reserve for known risks, and a 5% reserve for unknown risks. Most of the project's reserves have not been spent. The risk manager, who is also the project schedule manager, establishes monthly risk management reviews to evaluate performance. So far, the project has missed 50% of the planned risk mitigation milestones.
Based on this project data, what technique should the risk manager recommend to improve the risk management process?