“…IT project risk management is widely regarded as a means of improving the success rate on IT projects (Schmidt et al, 2001). Prior literature on IT project risk has focused on six areas: (1) identifying risk factors and components of risk (McFarlan, 1981;Barki et al, 1993;Neumann, 1995;Keil et al, 1998;Lyytinen et al, 1998;Ropponen & Lyytinen, 2000;Schmidt et al, 2001;Wallace et al, 2004); (2) methods and techniques for risk assessment (Tiwana & Keil, 2004;Cuellar & Gallivan, 2006;Costa et al, 2007); (3) frameworks for risk management (Boehm, 1991;Fairley, 1994;Powell & Klein, 1996); (4) the relationship between risk and project performance (Nidumolu, 1995;Jiang & Klein, 1999;Na et al, 2004;Wallace et al, 2004;Han & Huang, 2007;Na et al, 2007); (5) exploring risk mitigation strategies to improve project performance (Alter & Ginzberg, 1978;Keil et al, 1998;Barki et al, 2001;Bahli & Rivard, 2003;Jiang & Klein, 2004;Iversen et al, 2004;Taylor, 2006); and (6) understanding risk perceptions (Keil et al, 2002;Camprieu et al, 2007;Keil et al, 2008).…”