“…Failure to assess risk could lead to failure of the AIS (Montagna & Kok, 2016) and according to (Hopkin, 2018), risk assessment is an effective operational influence on IS success. Meanwhile, (Willumsen et al, 2019) stated that risk analysis in the IS development could mitigate risk of IS implementation and similarly, (Star et al, 2016) explained that risk management can be categorized into three, which are operational risks identification, financial risks identification, and risk management. These encapsulate the risk of failure of internal processes, human resources error risk, risk of IS failure, risk of loss stemming from external events, and risk of loss brought about by the breach of applicable laws and regulations (Star et al, 2016).…”