Pretty much every project has to deal with risks. Maybe there are lucky projects, where risks never happen, but I have never been lucky to work in such a project.
Risks can be analyzed with different methods, some more formal than others. Some even say that risk management is mostly wasted effort and modern agile approach can handle risks when they arise. In those cases, risk management plan is more of a list of things that could go wrong and is just a way of communicating expectations of the project to stakeholders.
Hint: 60% of estimated time will be actually used for project. Rest 40% goes for everything else.