The biggest challenge in a project is to identify risks up front, because there are too many variables in a project, starting with infrastructure, resources or solution, cause by the fact we are expecting some kind of performance or feature and don't work and we need to redesign the all or part of the concept. This happen to me in the last CRM 2013 project that i think the security model that i implement will work fine applying security field but One of the big limitations of Field Security in previous versions of Dynamics CRM was that it was only available on custom fields and not on out of the box fields. In Dynamics CRM 2015 however Field Security can now be enabled on most out of the box fields, with only certain system fields such as the primary key/primary field or status/status reason not having Field Security as an option, and i have other issue cause by the fact the entity was created as organization level and not user level not allowing me to implement an shared record security model. And the entire security model had to be redesign.
When the planning work is occurring, the project team should identify all known risks. For each risk, they should also determine the probability that the risk event will occur and the potential impact on the project, one of the most common risk is the time spend on installation just because the service user don’t have access, even after we advise the client before the project start or scope creep, other examples could be given. Those events identified as high-risk should have specific plans put into place to mitigate them so they do not occur. Medium risks should be evaluated to see whether they need to be proactively managed. For medium risk we may identify as assumptions like creating a mock-up that we know for sure will be changed and we know that the form will have 30 fields instead of 150, this kind of assumptions could help us to estimate and the outcome is much more probable. Continue to assess potential risks throughout the project once the project begins and periodically perform an updated risk assessment to determine whether other risks have surfaced that need to be managed. Bear in mind always the features that the new CRM releases are coming if you are working online or offline, this is really important an can give some implications or could solve halt of your issues, like for example the new features available in CRM 2016 will help you on reporting or data analysis. Microsoft is now giving us new features ever single year, and big jumps have being made, and sometimes this could cause some impact on your project, especially if you are working online.