The decommissioning project of NPP is a large-scale project, with various risks. Successful implementation of the project requires appropriate identification and management of risks. IAEA considered risk management “To maximize opportunities and to minimize threats by providing a framework to control risk at all levels in the organization”. Framework-based risk management allows project managers to identify key areas in which action should be taken at an appropriate time. Also, it enables effective management of projects by supporting decision-making on sub-uncertainty. Risk could be categorized according to the source of the risk. This is called Risk Breakdown Structure (RBS), and is documented as a risk assumption register through a risk identification process. IAEA considers various factors when defining risks in accordance with ISO 31000:2009. IAEA SRS No.97 presents a recommended risk management methodology for the strategy and execution stage of the decommissioning project of nuclear facilities through the DRiMa project conducted from 2012 to 2015. The risk breakdown structure classified in DRiMa project is as follows: (1) Initial condition of facility, (2) End state of decommissioning project, (3) Management of waste and materials, (4) Organization and human resources, (5) Finance, (6) Interfaces with contractors and suppliers, (7) Strategy and technology, (8) Legal and regulatory framework, (9) Safety, and (10) Interested parties. They have various prompts for each category. Such a strategy for dealing with risks has negative risks (threats) or positive risks (opportunities). The negative risks are as shown in avoid, transfer, mitigate and accept. On the other side, the positive risks are as shown in exploit, share, enhance and accept. During the decommissioning, a contingency infrastructure is needed to decrease the probability of unexpected events caused by negative risks. The contingency infrastructure of decommissioning project includes organization, funding, planning, legislation & regulations, information, training, stakeholder involvement, and modifications to existing programs. Since all nuclear facilities have different environmental, physical or contamination conditions, risks and treatment strategies should also be applied differently. This risk management process is expected to proceed at the stage of establishing and implementing a detailed plan for the decommissioning project of each individual plant.