A project team is overseeing the construction of a new office building. The project is complex, involving multiple contractors, regulatory requirements, and a tight schedule. During a team meeting, the risk manager realizes that a formal risk identification exercise has not yet been conducted.

Given the project ' s complexity, what should the risk manager do?