Risk management practices for information system projects in the public sector

Abstract

Information System projects face many risks and challenges due to their complexity and technicality. Most public information system projects fail to achieve their objectives due to various factors including poor risk management. Despite continuous attention and emphasis on the importance of risk management during project implementation, risk management practices were relatively low and the risk management process has not been practiced in its entirety; it is commonly implemented only during its early phase. This paper analyzed selected risk management models that are commonly used by project managers. In general, five basic risk management processes are included and analyzed in these models, namely Risk Identification, Risk Analysis, Risk Classification, Risk Mitigation and Risk Control. This study also identified the level of basic risk management processes adopted by information system projects in a number of selected case studies.