It Project Risk Management And Case Study

China has melted into the globalization of the world economy at an unprecedented speed. China's IT industry, though once lagged behind other countries, now is following the world's pace closely. But there are barriers to its development: the lack of scientific management is China's IT industry's headache. Among many of the problems, the theories concerning IT engineering and IT project management and their flexible application are yet to improved immediately.This thesis, based on practical projects and practices, investigates the risk management of the IT projects and summarizes the lessons obtained regarding IT project risk control, which are hoped to provide reference to the practice in this field.Project management can be classified into scope management, time management, cost management, quality management, risk management, staff management, purchase management, communication management, and project integral management in terms of fields concerned. In terms of process, it can be classified as initiation, planning , implementation, supervision, and ending. Among them, risk management is one of the most important part, connecting closely to other fields of project management and involves every process of project management.Project Risk Management include risk recognition, risk evaluation, risk planning, risk control and risk monitor. It is a constant process and can be carried out in any stage of the project.This thesis starts from a case in practice: a project concerning a computer information system security system. Based on risk management, the thesis collects related data and finds out risk factors and based on the finding, security strategies are made first, and at the same time, risk precautions are made up, budget is planned and timing is arranged. With the application of risk control and timely discovery of new risks and the implementation of risk dealing measures, the project run smoothly and realizes the goal expected.From the study of theories as well as practical case, this thesis concludes that:1. Risk Management is often neglected in IT industry although it often contributes to the accomplishment of a project despite of the crisis. Different from crisis management, whose contribution to the project is easy to be seen, as it helps to solve problems. But in essence, risk management sets its goal as " no crisis and no risks." Without risk management, the potential risks can bring great harm to projects.2. Promoting risk management awareness is important. Staff training is to ensure this awareness can be promoted.3. The project manager's risk management awareness will decide the performance of the risk management of the project concerned. 4. Projects, large or small, need risk management.5. There are many risk factors for IT projects and technology risk is just one of them. The biggest risk is those caused by human factors. Therefore, human resource management will have to be improved and human resource should be used in an optimum way.6. Risk management is needed at the very beginning of the project and the possible risks threatening the project should be minimized. Grave problems are to be seen to but details are not to be neglected. Profits are to be pursued without increasingthe risks.Risks often emerge beyond people's expectation and are often hard to predict. Therefore, in the process of project development, risk management should adjust itself according to the risks appeared. It should also predict, respond timely to risks and lower the risk to ensure the success of the project.