The management of risk is considered a key discipline by the Project Management Institute and the Association for Project Management. However, knowledge of what needs to be done frequently fails to result in action consistent with that knowledge. The reasons for this seem to have received little attention. This study researched the degree of use of project risk management and barriers that prevent IT project managers from using risk management. Interviews and a survey were carried out. The results show that, in one-third of cases, because of the problem of cost justification, no formal project risk management process was applied.
AkintoyeA. S., & MacLeodM. J. (1997). Risk analysis and management in construction. International Journal of Project Management, 15(1), 31–38.
2.
AnandP. (1993). Foundations of rational choice under risk.Oxford, UK: Clarendon Press.
3.
ArrowK. J. (1983). Behaviour under uncertainty and its implications for policy. In StigumB. P., & WenstopF. (Eds.), Foundations of utility and risk theory with applications (pp. 19–32). Dordrecht, Germany: D. Reidel Publishing Company.
4.
Association for Project Management (APM). (2005). Project management body of knowledge.London: Author.
5.
BeierleT. C. (2004). The benefits and costs of disclosing information about risks: What do we know about right-to-know?Risk Analysis, 24, 335–346.
6.
Ben-DavidI., & RazT. (2001). An integrated approach for risk response development in project planning. Journal of the Operational Research Society, 52, 14–25.
7.
BorgeD. (2001). The book of risk.New York: Wiley.
8.
British Standards Institution. (2000). Project management—part 3: Guide to the management of business related project risk.London: Author.
9.
ChapmanC. (1997). Project risk analysis and management—PRAM the generic process. International Journal of Project Management, 15(5), 273–281.
10.
CrossanM. M. (1998). Improvisation in action. Organisation Science, 9, 593–599.
11.
CrossanM. M., WhiteR. E., LaneH. W., & KlusL. (1996). The improvising organisation: Where planning meets opportunity. Organizational Dynamics, 24(4), 20–35.
12.
DouglasM., & WildavskyA. (1982). Risk and culture.Berkeley, CA: University of California Press.
13.
EisenhardtK. M. (1997). Strategic decisions and all that jazz. Business Strategy Review, 8(3), 1–3.
14.
EkenbergL., BomanM., & Linnerooth-BayerJ. (2001). General risk constraints. Journal of Risk Research, 4(1), 31–47.
15.
FischhoffB., LichtensteinS., SlovicP., DerbyS. L., & KeeneyR. L. (1981). Acceptable risk.Cambridge, UK: Cambridge University Press.
16.
FrosdickS. (1997). The techniques of risk analysis are insufficient in themselves. Disaster Prevention and Management, 6(3), 165–177.
17.
GaulkeM. (2002). Risikomanagement in IT-projekten.Wien: Oldenbourg Verlag.
18.
GrahamR. (1999). Managing the project management process in aerospace and construction: A comparative approach. International Journal of Project Management, 17(1), 39–45.
19.
HallW. K. (1975). Why risk analysis isn't working. Long Range Planning, 8(6), 25–29.
JaegerC. C., RennO., RosaE. A., & WehlerT. (2001). Risk, certainty, and rational action.London: Earthscan.
22.
KahnemanD., & TverskyA. (1979). Prospect theory: An analysis of decision under risk. Econometrica, 47, 263–291.
23.
KeilM., MixonR., SaarinenT., & TuunainenV. (1995). Understanding runaway information technology projects: Results from an international research program based on escalation theory. Journal of Management Information Systems, 11(3), 65–85.
24.
LanzaR. B. (2000). Does your project risk management system do the job?Information Strategy: The Executive's Journal, 17(1), 6–12.
25.
LyonsT., & SkitmoreM. (2004). Project risk management in the Queensland engineering construction industry: A survey. International Journal of Project Management, 22, 51–61.
26.
MachlisG. E., & RosaE. A. (1990). Desired risk: Broadening the social amplification of risk framework. Risk Analysis, 10(1), 161–168.
27.
McGrewJ. F., & BilottaJ. G. (2000). The effectiveness of risk management: Measuring what didn't happen. Management Decision, 38, 293–300.
28.
MeyerA. D., LochC. H., & PichM. T. (2002). Managing project uncertainty: From variation to chaos. IEEE Engineering Management Review, 30(3), 91–98.
29.
MinerA. S. (2001). Organizational improvisation and learning: A field study. Administrative Science Quarterly, 46, 304–337.
30.
Office of Government Commerce. (2007). Management of risk: Guidance for practitioners.London: The Stationery Office.
31.
OtwayH. (1992). Public wisdom, expert fallibility: Toward a contextual theory of risk. In KrimskyS. & GoldingD. (Eds.), Social theories of risk (pp. 215–228). Westport, CT: Praeger.
32.
ParkerD., & MobeyA. (2003). Perceptions in risk evaluation for project management. Presented at the EurOMA—POMS Conference, Italy.
33.
PenderS. (2001). Managing incomplete knowledge: Why risk management is not sufficient. International Journal of Project Management, 19, 79–87.
34.
Project Management Institute (PMI). (2004). A guide to the project management body of knowledge (PMBOK® Guide)—Third edition. Newtown Square, PA: Author.
35.
RafteryJ. (1994). Risk analysis in project management.London: Chapman & Hall.
36.
RazT., & MichaelE. (2001). Use and benefit of tools for project management. International Journal of Project Management, 19, 9–17.
37.
RitchieB., & MarshallD. (1993). Business risk management.London: Chapman & Hall.
38.
RobsonC. (2002). Real world research: A resource for social scientists and practitioner—researchers (2nd ed.). London: Blackwell.
39.
RoyerP. S. (2000). Risk management: The undiscovered dimension of project management. Project Management Journal, 31(1), 6–13.
40.
ShakleG. (1952). Expectation in economics (2nd ed.). Cambridge, UK: Cambridge University Press.
41.
SlovicP., FischhoffB., & LichtensteinS. (1980). Facts and fears: Understanding perceived risk. In SchwingR. C. & AlbersW. A. (Eds.), Societal risk assessment (pp. 181–214). New York: Plenum Press.
42.
The Standish Group International. (2007). Chaos (application project and failure).West Yarmouth, MA: Author.
43.
Tummala RaoV. M., LeungH. M., BurchettJ. F., & LeungY. H. (1997). Practices, barriers and benefits of using risk management approaches in selected Hong Kong industries. International Journal of Project Management, 15, 297–312.
44.
TverskyA., & KahnemanD. (1992). Advances in prospect theory: Cumulative representation of uncertainty. Journal of Risk and Uncertainty, 5, 297–323.
45.
WardS., & ChapmanC. (1991). Extending the use of risk analysis in project management. Project Management Journal, 9, 117–123.
46.
WardS., & ChapmanC. (2002). Transforming project risk management into project uncertainty management. International Journal of Project Management, 21, 97–105.
47.
WeickK. E. (1998). Improvisation as a mindset for organisational analysis. Organisation Science, 9, 543–555.
48.
WhiteB., & LeiferR. (1986, September). Information systems development success: Perspective from project team participants. MIS Quarterly, 10, 215–223.
49.
WhittakerB. (1999). What went wrong? Unsuccessful information technology projects. Information Management & Computer Security, 7(1), 23–29.
50.
WilliamsT. M. (2005). Assessing and moving on from the dominant project management discourse in the light of project overruns. IEEE Transactions on Engineering Management, 52, 497–508.
51.
WirthI. (1996). How generic and how industry-specific is the project management profession?International Journal of Project Management, 14(1), 7–11.
52.
YoungT. L. (1998). The handbook of project management.London: Kogan Page Ltd.
