Lack of a risk management plan

Consider the oversight "Lack of a risk management plan". Why might this occur and what are the

challenges/problems/ issues created because of it?