Purpose This paper aims to take the challenge to propose a novel modelling approach named Change Risk Assessment Model (CRAM), which will contribute significantly to the missing formality of business models especially in the change risk assessment area and decision-making. Organisational change risks are assessed with the aid of analytic hierarchy process (AHP) in an attempt to define the internal dynamics of organisational change management within project management eliciting also risk cause-and-effect relationships. Design/methodology/approach The study discusses interviews/survey/AHP. Findings The study presents the following findings. Change risk factors assessment (identification and prioritisation) recommendations (see Case Study) integration of change management; project management; risk management top four risk factors, namely, leadership, communication, project management team and culture. Research limitations/implications As projects can be different in a variety of factors (quality, scope), an exhaustive list of risk factors cannot be identified. There is a continuous risk identification process throughout the projects’ life cycle. For example, many risks can be classified initially as unknown and can be refined after the initiation phase of the project. AHP factors limitation (eight per level) possible bias (survey analysis). Practical implications With the aid of modelling and especially CRAM, business change risks can be assessed numerically and prioritised. Several risk factors and related attributes were identified and categorised. This empowers project managers or other stakeholders to make proper decisions about whether to take on or abandon respective organisational or project changes. Social implications One of the values of CRAM is that it can be regarded as a global change risk assessment method that can be applied regardless of project type, size or organisation. Moreover, it has the advantage that it can be used by any kind of project, as the method is designed to be tailored to specific needs, taking significant environmental change risk factors into account. AHP has numerous uses in operational research, in project management and in general in areas where decisions (evaluation and selection) have to be made. The analysis of the case study presented, indicated that it is vital to assess the degree (impact) that each risk attribute poses to address complex organisational decisions. Originality/value CRAM aims to bridge the gap between theoretical and applied work in the integrated research field of change management, project management and risk management. Furthermore, the approach attempts to develop a novel systematic methodology (model) for assigning probabilities in attributes (criteria) pair-wise comparison and more specifically, modelling and assessing change management risks, adding a different perspective and technique to the research area.