A project team reviews their Risk Breakdown Structure and finds that 80% of identified risks fall under the 'Organizational' category.What is the most appropriate conclusion?