Why the risk management is so crucial in maintaining the security project?

Risk is the chance of something happening that will have impact (positive/negative) to your objectives. Risk management helps to identify those risks by applying the risk management process. At the end you will be able to identify your assets, threats, vulnerabilities, the risks associated and appropriate controls