In every Microsoft CRM implementation I have been involved in, there has been at least one item that I considered to be a risk (no surprises there).
The most common risk factors I’ve come across are:
Availability of qualified resources
Complexity of technical infrastructure and ensuring everything works
Complexity of functional requirements and impact on customizations, particularly custom programming
Third-party [...]